Cybersecurity Open Source Projects

Ghidra is a software reverse engineering (SRE) framework

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org

🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2023

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

An open source cybersecurity protocol for syncing decentralized graph data.

This repository contains a 90-day cybersecurity study plan, along with resources and materials for learning various cybersecurity concepts and technologies. The plan is organized into daily tasks, covering topics such as Network+, Security+, Linux, Python, Traffic Analysis, Git, ELK, AWS, Azure, and Hacking. The repository also includes a `LEARN.md

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Useful tool to track location or mobile number

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures.

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

A collection of Linux Sysadmin Test Questions and Answers. Test your knowledge and skills in different fields with these Q/A.

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report — 600+ exploits, 90+ integrations, 10K+ detections.

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

Open Cyber Threat Intelligence Platform

Tools and Techniques for Red Team / Penetration Testing

A curated list of tools for incident response

Berty is a secure peer-to-peer messaging app that works with or without internet access, cellular data or trust in the network

A collection of several hundred online tools for OSINT

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️

An OSINT tool to search for accounts by username and email in social networks.

Automated Adversary Emulation Platform

Ultimate DevSecOps library

One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

Open Source Vulnerability Management Platform

A curated list of GPT agents for cybersecurity

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.

A collection of awesome security hardening guides, tools and other resources

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

GNU Radio – the Free and Open Software Radio Ecosystem

An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session.

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

Open-source tool to enforce privacy & security best-practices on Windows, macOS and Linux, because privacy is sexy

:computer:🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.

Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...

IntelOwl: manage your Threat Intelligence at scale

Open Source Deep Packet Inspection Software Toolkit

Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).

🚗 A curated list of resources for learning about vehicle security and car hacking.

Git All the Payloads! A collection of web attack payloads.

Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.

Cybersecurity oriented awesome list

💚🇺🇸🗽Secure remote browsing anywhere, any way you like it.

A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.

Security-related Slide Presentation & Security Research Report（大安全各领域各公司各会议分享的PPT以及各类安全研究报告）

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.

🎓 Because Education should be free. Contributions welcome! 🕵️

Interesting APT Report Collection And Some Special IOCs

Awesome Node.js Security resources

Free hands-on digital forensics labs for students and faculty

Get Keyboard,Mouse,ScreenShot,Microphone Inputs from Target Computer and Send to your Mail.

Collection of resources spanning key areas of Computer Science

Security automation content in SCAP, Bash, Ansible, and other formats

RedEye is a visual analytic tool supporting Red & Blue Team operations

🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.

List of Github repositories and articles with list of dorks for different search engines

Automation to assess the state of your M365 tenant against CISA's baselines

Alfred is a advanced OSINT information gathering tool that finds social media accounts based on inputs.