A curated collection of security tools, frameworks, and resources for Enumeration, Cloud Security, Static Analysis, Threat Intelligence, and more. This repository serves as a central reference for penetration testers, security engineers, and researchers.
☆23Dec 2, 2025Updated 9 months ago
Alternatives and similar repositories for open-source-arsenal
Users that are interested in open-source-arsenal are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Maturity Model Collaborative project☆15Feb 27, 2023Updated 3 years ago
- Este repositorio é apenas um exemplo de como adicionar OWASP ZAP Actions em uma pipeline de DevOps.☆19Mar 12, 2021Updated 5 years ago
- Organizar documentos sobre OSINT feitos em pt-br☆21Dec 20, 2023Updated 2 years ago
- Threat Detection Engineering 101 Project☆21Oct 17, 2024Updated last year
- ☆21Jul 29, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- This is a phishing ready platform. Unlike other phishing methods, EvilnoVNC allows you to bypass 2FA using a real browser via noVNC conn…☆11Apr 7, 2023Updated 3 years ago
- The Open Source HCS Platform☆16Dec 16, 2020Updated 5 years ago
- PayloadsAllTheThings Skills Plugin for Claude Code☆21Jan 3, 2026Updated 8 months ago
- OWASP Foundation Web Respository☆22May 20, 2026Updated 3 months ago
- ☆17Apr 14, 2026Updated 4 months ago
- ☆25Jul 27, 2026Updated last month
- OpenAEV Docker deployment helpers☆30Sep 3, 2026Updated last week
- A simple web app that helps developers understand the ASVS requirements. Now supporting ASVS 5.0☆170Sep 2, 2026Updated last week
- ☆175Jun 11, 2025Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- ☆84Aug 11, 2026Updated last month
- ZERG (Zero-Effort Rapid Growth): Secure and parallel Claude Code execution system. Overwhelm features with coordinated zergling swarms.☆34Apr 19, 2026Updated 4 months ago
- Miscellaneous one-off scripts, exploits, tools, sample code, ...☆10Feb 13, 2019Updated 7 years ago
- A Pythonic framework for threat modeling☆24Aug 14, 2026Updated 3 weeks ago
- Interactive CRQ Monte Carlo simulation tool for quantifying cybersecurity risk using FAIR methodology. Built for EU SMBs, vCISOs, and sec…☆55Aug 19, 2026Updated 3 weeks ago
- ☆35May 13, 2021Updated 5 years ago
- ☆43Updated this week
- ☆24Oct 13, 2025Updated 10 months ago
- A low-cost approach to testing AI chat experiences and security concepts☆41May 30, 2026Updated 3 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Static code analyser for backdoors and malicious code in git repos using OpenAI compatible LLM APIs☆73Mar 1, 2024Updated 2 years ago
- ☆12May 13, 2024Updated 2 years ago
- Python script demonstrating the process of recovering text from embeddings, highlighting the associated privacy risks and mitigation stra…☆20Nov 19, 2024Updated last year
- Python tool for exploiting CVE-2021-35616☆11Dec 3, 2021Updated 4 years ago
- Crashbench is a LLM benchmark to measure bug-finding and reporting capabilities of LLMs☆14Aug 7, 2026Updated last month
- Finding Valuable Needles in Global Source Code Haystacks with Automation☆17Feb 11, 2021Updated 5 years ago
- OWASP Foundation Web Respository☆16Oct 9, 2025Updated 11 months ago
- ☆16Jul 12, 2026Updated 2 months ago
- ASH is an extensible, open source SAST, SCA, and IaC security scanner orchestration engine.☆693Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Run NVIDIA DGX Cloud Benchmarks on Kubernetes, vCluster, and bare metal GPUs — single command☆16Jul 7, 2026Updated 2 months ago
- Local forensic scanner that extracts credentials from AI tool conversation history. For authorized red team and DLP use only.☆59Updated this week
- ☆12May 19, 2025Updated last year
- Build faster with an Agentic Workforce. Safe, secure, and compliant is now the default.☆113Updated this week
- ☆14Jan 2, 2024Updated 2 years ago
- C# implementation of the process injection techniques dubbed "PoolParty"☆17Nov 7, 2025Updated 10 months ago
- A fast vulnerability scanner for package dependencies☆16Jul 22, 2026Updated last month