Open Source Security Arsenal

spiderfoot SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

personal-security-checklist 🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026

SafeLine SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

h4cker This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org

Anthropic-Cybersecurity-Skills 817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0

maigret 🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

shannon Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

x64dbg An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

ImHex 🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

strix Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

sherlock Hunt down social media accounts by username across social networks