Security · GitHub

Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.

• Log Management and Correlation
• Threat Detection and Response

Local, private push-to-talk dictation for macOS. Hold a key, speak, release — your words appear in any text field. Runs entirely on-device via whisper.cpp with bundled multilingual model. No cloud, no telemetry, no paywall.

Awesome Vulnerable Applications

The VD Infos app reads several of these details and information to show you an example of what can be captured from your device in use.​ A.k.a VDInfos, VDInfo, VD Info.

WireGuard, AmneziaWG, Cisco AnyConnect and Tailscale in one native, free and open-source macOS VPN client: SwiftUI app, Network Extension, kill switch, on-demand, and a wombat CLI

• Import anything: drag in .conf files, a zip of them, or paste from the clipboard. Every import shows where traffic will go and what's risky before anything is saved, and an import from the clipboard clears it afterwards, since a configuration holds its private key.
• QR codes: scan a tunnel's QR code with the Mac's camera (or an iPhone as Continuity Camera), or import a screenshot or picture of one. Going the other way, Show QR Code puts a tunnel on your phone, after Touch ID.

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision

A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

The Black Tiger is all in one OSINT Tool, which has the best methods to collect Information about something or someone just by few mouse clicks.

Open Source Firewall IP List Publishing

Github Sensitive Information Leakage Monitor(Github信息泄漏监控系统)

the blazing-fast pentesting suite.

A Burp Suite extension for identifying injection flaws (LFI, RCE, SQLi), authentication/authorization issues, and HTTP 403 access violations. It supports dynamic payload generation, including BCheck syntax, and can automatically generate Bambdas scripts. Additionally, it offers "Copy as JavaScript" to convert HTTP requests for enhanced XSS testing.

Hardware-backed developer credentials

Offline password, identity, and secret vault. Argon2id + AES-256-GCM, zero servers, zero telemetry.

Nmap NSE scripts that turn a service scan into CVEs, CVSS scores and known exploits — fingerprints software from HTTP responses and checks every detected CPE against the Vulners database.

The autonomous pentester that proves its findings — AI-driven, evidence-first, behind-login.

• Assess a web application - Start from a URL, define scope and account roles, and follow the discovered pages and APIs.
• Assess an API specification - Coming Soon