Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more

Kubesonde: network policy testing and verification in K8s

Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.

Substation is a toolkit for routing, normalizing, and enriching security event and audit logs.

Hubble is a modular, open-source security compliance framework. The project provides on-demand profile-based auditing, real-time security event notifications, alerting, and reporting.

Script to audit GitHub Action Workflow files for potential vulnerabilities.

📂 Access Linux-native file systems (including LVM and LUKS) on Windows and macOS with help of a lightweight Alpine Linux VM. x86/ARM supported.

Collection of Cyber Threat Intelligence sources from the deep and dark web

Patches needed to build VMware (Player and Workstation) host modules against recent kernels

The fastest knowledge base for growing teams. Beautiful, realtime collaborative, feature packed, and markdown compatible.

GitHub App to set and enforce security policies

Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets

Vmware Host Module.

Open-source KVM software

Basic Authentication for Cloudflare Pages

An evolving repository of CloudTrail events with detailed descriptions, MITRE ATT&CK insights, real-world incidents, references and security implications

The AWS Serverless Application Model (AWS SAM) transform is a AWS CloudFormation macro that transforms SAM templates into CloudFormation templates.

AWS API Gateway, Lambda and FastAPI + Mangum

Playing around with Stratus Red Team (Cloud Attack simulation tool) and SumoLogic

Slack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace

Adversary Emulation Framework

A collaborative, multi-platform, red teaming framework

Per object permissions for Django

Prefect is a workflow orchestration framework for building resilient data pipelines in Python.

PLynx is a domain agnostic platform for managing reproducible experiments and data-oriented workflows.

Create agents that monitor and act on your behalf. Your agents are standing by!

Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.

🕵️‍♂️ Collect a dossier on a person by username from thousands of sites

Hunt down social media accounts by username across social networks

smartrecon is a powerful shell script to automate the recon and finding common vulnerabilities for bug hunter