This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artificial intelligence security, vulnerability research, exploit development, reverse engineering, and more.

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Open Source Vulnerability Management Platform

Open device management

Open Source Cloud Native Application Protection Platform (CNAPP)

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

DevSecOps, ASPM, Vulnerability Management. All on one platform.

This repository contains the scanner component for Greenbone Community Edition.

Tools and Techniques for Blue Team / Incident Response

ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.

Open-source CVE monitoring and alerting platform

Open source vulnerability DB and triage service.

🆕 The Multi-Tool Web Vulnerability Scanner.

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

GUAC aggregates software security metadata into a high fidelity graph database.

🧵 CLI tool for directly patching container images!

Open source templates you can use to bootstrap your security programs

Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance through execution and reporting. With built-in command automation, output parsing, and AI‑assisted summaries, it delivers faster, more structured, and high‑quality security assessments.

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

Easy automated vulnerability scanning, reporting and analysis