Security · GitHub

让你通过浏览器安全地远程使用 DeepSeek Harness：登录、MFA 两步验证、角色权限和远程文件预览。 | Use DeepSeek Harness securely in a remote browser with login, MFA, roles, and remote file preview.

RuoYi (若依) dedicated vulnerability scanner: plugin architecture, three-state verdict, WAF bypass, exploit chains, AI POC generation, nuclei compatible. 若依专项漏洞扫描器

一款适用于红蓝对抗中的仿真钓鱼系统

OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the community.

Automated Google Dorking tool. It generates and executes advanced search queries to locate exposed files. It also checks for vulnerabilities such as SQLi and XSS, performs metadata analysis and extraction.

Open-source API to check if an email has been exposed in a data breach and monitor breaches across your verified domains. Real-time alerts and breach analytics protect your online identity.

• Check whether an email has appeared in a known data breach, with stats on where and when
• See if an email shows up in public pastes

渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework

TriLane: autonomous AI pentester and multi-agent security auditor for authorized gray-box testing of web apps and APIs. Built with Rust and Tauri.

Your personal 'Mini Shodan'. A high-performance network reconnaissance engine designed for massive scale asset discovery. Specializes in identifying unsecured services (Open RTSP Cameras, No-Auth VNC, Anonymous FTP) and deeply fingerprints device models with a beautiful real-time terminal dashboard.

• Scans IP ranges for open services (HTTP, FTP, SSH, VNC, RTSP, RDP)
• Identifies authentication requirements for discovered services

A real-time, terminal-based network traffic analyzer built with Python, Scapy, and Rich. Captures live packets using multi-threading to display real-time protocol breakdowns and top active IP addresses in a dynamic CLI dashboard.

• Live Packet Ingestion: Asynchronous packet sniffing powered by Scapy with multi-protocol parsing (TCP, UDP, ICMP).
• Real-time Telemetry Dashboard: High-frequency UI rendering (4 FPS) showing packet throughput velocity, average packet size, and protocol mix ratios.

The best hacker's gadgets for Red Team pentesters and security researchers.

Privacy-first, local-only barcode scanning SDK for Web, Node.js, React, iOS and Android with multi-format decoding, realtime tracking, batch scanning, and native/WASM engines.

• Image upload and realtime camera scanning
• Multiple-code results, tracking, and batch identity

:tada: (RuoYi)官方仓库 基于SpringBoot，Spring Security，JWT，Vue & Element 的前后端分离权限管理系统

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

Wi-Fi rogue access point video Prank Tool, Rick Roll Wi-Fi

Bugboard is a comprehensive open-source cybersecurity tool for vulnerability detection and bug hunting.

• Comprehensive Vulnerability Assessment: Detect vulnerabilities like SQL Injection, XSS, CSRF, and more.
• Modular Design: Organized sections for targeting specific vulnerabilities.

DorkTerm is a security tool designed to assist security researchers in performing Google Dork queries efficiently.

• Runs 15 predefined Google Dork queries for security reconnaissance.
• User guidance on enabling popups for effective usage.

A powerful Bash script for extracting URLs and API endpoints from HTML, JavaScript, and JSON content of web pages. Designed for security researchers, bug bounty hunters, and developers to streamline endpoint discovery. Simple to use, supports single or multiple URLs, and offers file-saving capabilities.

• Scan a single URL or a list of URLs.
• Extract URLs from HTML, JavaScript, and JSON content.