Self-hosted external attack surface scanner. See what attackers see: subdomains, takeovers, open ports, CVEs ranked by EPSS/KEV, TLS/SSH/web hygiene, leaked secrets, breach and lookalike domain exposure. Recon for pentests, evidence for ISO 27001/SOC 2 audits. 30 tools, 13 phases, one `docker compose up`. MIT.
☆35Nov 10, 2026Updated this week
Alternatives and similar repositories for OpenEASD
Users that are interested in OpenEASD are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Open-source Attack Surface Management. Discover assets. Identify exposure. Own your security data.☆277Updated this week
- 🦋 Glasswing — See through Flutter's TLS. Bypass BoringSSL SSL pinning on Android: static libflutter.so patching + Frida runtime hooks. N…☆24Oct 18, 2026Updated 3 weeks ago
- The autonomous pentester that proves its findings — AI-driven, evidence-first, behind-login.☆27Updated this week
- The Kerberoasting / AD password-audit wordlist I use on engagements: priority-merged HashMob large list + The-Viper-One's kerberoast_pws,…☆16Oct 2, 2026Updated last month
- High-speed, multi-threaded APT hunting tool designed for lateral movement detection and forensic artifact discovery in Windows environmen…☆15Feb 8, 2026Updated 9 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Mass Assigner is a simple tool made to probe for mass assignment vulnerability through JSON field modification in HTTP requests☆18Jun 22, 2024Updated 2 years ago
- MCP integration for connecting the ReconFTW security toolbox to compatible agent workflows.☆21Oct 13, 2026Updated last month
- A proof of concept of the path traversal vulnerability in the python AioHTTP library =< 3.9.1☆20Mar 19, 2024Updated 2 years ago
- Neo4j Cybersecurity Demo☆20Mar 16, 2022Updated 4 years ago
- A biweekly secure code review challenge series, full working apps, based on real-world vulnerabilities.☆13Oct 31, 2026Updated last week
- The Shodan MCP Server by ADEO Cybersecurity Services provides cybersecurity professionals with streamlined access to Shodan's powerful re…☆26Mar 22, 2025Updated last year
- An agent that can help triage vulnerabilities across multiple codebases☆19Mar 14, 2026Updated 8 months ago
- Research into Undocumented Behavior of Azure AD Refresh Tokens☆13Oct 27, 2023Updated 3 years ago
- MCP (Model Context Protocol) server as a jadx-gui plugin. Lets an AI client (Claude Code, Claude Desktop, or any MCP client) analyze the …☆17Sep 2, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Extract domain from SSL Information☆15Nov 23, 2021Updated 4 years ago
- This tool is designed to seamlessly convert Postman collections into OpenAPI schemas. This conversion is essential for API security testi…☆12Sep 3, 2024Updated 2 years ago
- A last-mile CISSP guide for security architects: the business side of cyber (risk, governance, law, and the manager mindset)☆25Sep 17, 2026Updated last month
- Stores Azure DC IP addresses☆13Nov 15, 2024Updated last year
- DeepSeek Pentest AI - Burp Suite extension☆75Sep 14, 2025Updated last year
- FM-1 firmware Felucca fork that focuses on sampling☆11Oct 29, 2026Updated 2 weeks ago
- The Secrets Scanner that respects your time☆26Oct 2, 2026Updated last month
- Mobile app security auditing tool focused on automating SAST analysis, identifying underlying technologies (React Native, Flutter, Xamari…☆16Sep 18, 2026Updated last month
- **(WIP)** Overthrone - The First All-Rust Active Directory exploitation framework. A single static binary that takes you from network acc…☆32Oct 23, 2026Updated 3 weeks ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Client-side Encrypted Upload Server Python Script☆69Jul 10, 2025Updated last year
- Umbraco CMS 7.12.4 - (Authenticated) Remote Code Execution☆21Jul 18, 2023Updated 3 years ago
- Task scheduler by KDE☆14Updated this week
- Demo files demonstrating what the new hierarchy we generate in 2024 will look like.☆21Nov 5, 2026Updated last week
- GitHub - therealilyas/pentest-toolkit: PentestKit — Advanced penetration testing toolkit in Python & Bash for bug bounty and ethical hack…☆42Nov 1, 2026Updated last week
- List of resources about CyberSecurity such as CTF, DFIR, Offsec, etc☆12Sep 8, 2026Updated 2 months ago
- AI-powered reconnaissance framework for bug bounty and security testing☆23Updated this week
- Reddit TTS Video Generator☆12Jan 19, 2021Updated 5 years ago
- A pentest reporting tool written in Python. Free yourself from Microsoft Word.☆14Jun 13, 2023Updated 3 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Framework for LLM-based detection and classification of Android code obfuscation techniques.☆23Updated this week
- Simple CLI to generate slideshow video with native FFMPEG☆14Apr 2, 2017Updated 9 years ago
- Flutter SSL Pinning Bypass Tool for Android & iOS — works on any Flutter version without pattern databases☆323Sep 30, 2026Updated last month
- ☆26Sep 5, 2025Updated last year
- ☆42Jul 1, 2025Updated last year
- Recursively mirrors any website to disk. HTML, CSS, JS, images, fonts, video. C++ console tool, C# WinForms GUI, Python script. No extern…☆18Oct 14, 2026Updated 3 weeks ago
- ☆64Aug 27, 2026Updated 2 months ago
Are these results useful?