PyPI96Exceptionalhealth index
Python★ 10.6K↓ 36.3K/moSep 17, 2026
Go95Exceptionalhealth index
Go★ 14.6KOct 19, 2026
—94Exceptionalhealth index

OWASP/mastgThe OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
Python★ 13.2KSep 16, 2026
PyPI · Go · npm94Exceptionalhealth index
Python · Cypher★ 5,348↓ 7,794/moAug 28, 2026
Go94Exceptionalhealth index
Go★ 5,213Sep 18, 2026
npm92Excellenthealth index
TypeScript★ 2,711Sep 13, 2026
PyPI91Excellenthealth index

usestrix/strixOpen-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Python · Go★ 63KSep 16, 2026
PyPI · npm90Excellenthealth index
Python★ 1,310↓ 1,888/moSep 18, 2026
PyPI87Excellenthealth index
Python★ 4,726Aug 28, 2026
PyPI · crates.io84Excellenthealth index
Python · Rust★ 15K↓ 18.5K/moOct 19, 2026
Go★ 1,050Sep 14, 2026
Python★ 79.6KSep 16, 2026
Python · JavaScript★ 1,097↓ 137/moSep 9, 2026

RAJANAGORI/NightingaleNightingale Docker for Pentesters is a comprehensive Dockerized environment tailored for penetration testing and vulnerability assessment. It comes preconfigured with all essential tools and utilities required for efficient Vulnerability Assessment and Penetration Testing (VAPT), streamlining the setup process for security professionals.
Shell · Dockerfile · Python★ 313Sep 16, 2026
Python★ 3,956↓ 3,481/moSep 16, 2026
Go★ 594Sep 18, 2026
Go★ 1,715Sep 9, 2026
RubyGems62Moderatehealth index
Ruby★ 5,451Aug 28, 2026
Dockerfile · HTML · CSS★ 2,769Sep 16, 2026
Go★ 22Sep 10, 2026
Go★ 3Sep 6, 2026
RubyGems54Moderatehealth index
Ruby★ 6,801Aug 28, 2026

momenbasel/keyFinderPassive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
JavaScript · HTML · CSS★ 712Sep 14, 2026
PyPI50Moderatehealth index

the-hollowclan/LurkerXDecompile, optimize, recompile, and integrate spyware and remote control features into Android Apps with LurkerX, the ultimate tool for security researchers, penetration testers, and ethical hackers.
Python · HTML · JavaScript★ 31Oct 19, 2026

infinition/BjornBjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potential vulnerabilities. Bjorn can perform brute force attacks, file stealing, host zombification, and supports custom attack scripts.
Python★ 6,283Sep 16, 2026
RubyGems47Weakhealth index

OWASP/www-project-eks-goatOWASP EKS Goat is a deliberately vulnerable EKS cluster environment to explore AWS cloud-native security through hands-on attack and defense labs with walkthrough.
Shell · Python★ 48Sep 16, 2026

slab/safeurl-elixirHTTP client with built-in SSRF protection, compatible with Tesla and HTTPoison
Elixir★ 73Sep 9, 2026

Hackerest/pwneyeYour ONVIF and RTSP camera companion for discovering and hacking real-world security cameras 🎥
Python★ 194Sep 11, 2026

seqra/opentaintThe open source taint analysis engine for the AI era. A formal dataflow analysis tool you can customize and self-host, built so AI agents drive your application security analysis without burning tokens on every scan. AI-ready open source alternative to Semgrep Pro and CodeQL.
Kotlin · Go★ 157Sep 10, 2026
JavaScript★ 0↓ 128/moSep 19, 2026