#security-tools

Sheriff is a tool to scan repositories and generate security reports.

Bjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potential vulnerabilities. Bjorn can perform brute force attacks, file stealing, host zombification, and supports custom attack scripts.

Security scanner and introspection tool for MCP servers. Connect, inspect, detect injection patterns, find tool shadowing, baseline for drift. Single binary, zero dependencies, Go stdlib only.

Secure Templates is a tool to render templates using go-templates and load data values from secrets engine.

A fast, modular security testing toolkit written in Rust for bruteforcing, fuzzing, and hash cracking.

SecScan is a fast, configurable secret scanning tool written in Go that detects API keys, tokens, credentials, and high-entropy secrets across source code and full Git history. Built for developers and CI pipelines, with strong defaults and low false positives.

Free self-hosted OSINT investigator's toolkit. Sixteen investigation tools in one interface: crypto tracing, phishing fingerprinting, domain intel, Telegram OSINT, IP reputation, email header forensics with LLM scam detection, username enumeration, HIBP breach checks, ransomware victim tracking. AGPL-3.0.

Generate passwords using Finnish language words

Free, open-source network vulnerability scanner & penetration testing tool that ranks findings by real-world exploitability (EPSS + CISA KEV). Single desktop app for Windows, macOS, Linux. No cloud, no telemetry. MIT.

Your ONVIF and RTSP camera companion for discovering and hacking real-world security cameras 🎥

Finds what's wrong — and shows you the fix. Code, deps, config & infra — one offline scan, one report.

Recon tool for pentesters & bug bounty hunters: check robots.txt, security.txt (RFC 9116) and /.well-known/ across many targets. CLI + web UI, single static Go binary.

Universal API key validation engine. Concurrent Go CLI that tests 350+ provider credentials with worker pools, proxy rotation, webhook sinks, and CI gating.