Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Your window into the Elastic Stack

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.

John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

Netflow processing tools

Dradis Framework: Collaboration and reporting for IT Security teams

Automatic SQL injection and database takeover tool

Damn Vulnerable Web Application (DVWA)

Directory/File, DNS and VHost busting tool written in Go

Nikto web server scanner

Multi-Cloud Security Auditing Tool

This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), ar…

Focus on prompting and generating

Rewrite of the popular wireless network auditor, "wifite"

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

World's fastest and most advanced password recovery utility

MDK4

edb is a cross-platform AArch32/x86/x86-64 debugger.

Pingtunnel is a tool that send TCP/UDP traffic over ICMP

Awesome cloud enumerator

A little tool to play with Windows security

Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.

Fast web fuzzer written in Go

Six Degrees of Domain Admin