보안 · GitHub

자동화된 침투 테스트 프레임워크 - 오픈 소스 취약점 스캐너 - 취약점 관리

• Modular architecture - Each task — like port scanning, directory discovery, subdomain enumeration, vulnerability checks, or credential brute-forcing - is implemented as its own module, giving you control over what runs.
• Multi-protocol & multithreaded scanning - Supports HTTP/HTTPS, FTP, SSH, SMB, SMTP, ICMP, TELNET, XML-RPC, and can run scans in parallel for speed.

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude, codex, langchain etc.)

• 🛡️ Prismor covers the policy engine, session logs, security audit, and CLI reference
• 📦 Supply Chain covers install-time enforcement, IOC matching, and risk scoring

SimpleX - 어떤 종류의 사용자 식별자도 사용하지 않고 작동하는 최초의 메시징 네트워크로, 설계부터 100% 비공개를 지향합니다! iOS, Android 및 데스크톱 앱 📱!

Slim(toolkit): 컨테이너 이미지의 어떤 내용도 변경하지 않고 최대 30배까지 크기를 줄이며(컴파일 언어는 더 많이 줄일 수 있음), 보안성도 높입니다! (무료 및 오픈 소스)

이용 가능한 모든 CVE와 해당 PoC를 수집하고 업데이트하며, 최신 CVE도 포함합니다.

Your Google services (RCS, Gemini, Google Wallet, DroidGuard timestamps, Play Integrity attestations, Play Protect Certification) read on-device. No internet, root required.

The Rogue Access Point Framework

Search public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context.

A modular, free and open source System Data and Apple Intelligence cleaner for macOS.

Tookie is a advanced OSINT information gathering tool that finds social media accounts based on inputs.

• Scripting support
• WebUi (planned)

Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities

AI 에이전트 군집을 활용해 자율적으로 침투 테스트를 수행합니다. ReAct 추론으로 정찰, 분류, 취약점 악용, 보고를 담당하는 전문 에이전트를 조율합니다. 버그 바운티, 지속적 모니터링, CTF 모드를 지원하며 Go와 7개 이상의 네이티브 보안 도구로 구축되었습니다.

☁️ Ultra-fast, secure & lightweight self-hosted cloud storage — your files, photos, calendars & contacts, all in one place. Built in Rust.

An all-in-one hacking tool to remotely take over Android devices.

• Connect a device - Connect to a device remotely using ADB.
• List connected devices - Show all devices currently attached to ADB.

🛡 Automatically configure your app to follow OWASP security patterns and principles by using HTTP Headers and Middleware

• Security response headers (including CSP for SSG apps)
• Request Size & Rate Limiters

Cerbos는 애플리케이션, 게이트웨이, 워크로드, AI 에이전트 전반에서 모든 ID를 인증하고 모든 작업을 통제하는 오픈 코어 권한 관리 플랫폼입니다.

Debloat and harden Brave Browser on Linux, macOS, and Windows using Chromium enterprise policies. Curses TUI on Linux/macOS, native GUI on Windows. 79 policies, 6 presets, zero dependencies.

• Disable Metrics Reporting (crash reports; Brave sends no usage statistics through it. On by default in Beta and Nightly, and pre-ticked on Release's first-run welcome page; needs a restart)
• Disable URL Data Collection (Brave already ships "Make searches and browsing better" off; this locks it and overrides an earlier opt-in in the hidden Privacy Guide)