Cybersecurity GitHub Repositories (2026) · Open Source Tools

The Ultimate ESP32 Jammer w/ 5 Radios. #RIPflipper -- V2 OUT NOW

Distributed malware processing framework based on Python, Redis and S3.

Open source agentic SAST. The engine behind hundreds of disclosed zero-days. 100+ AI security agents, any repo or PR diff, bring your own model.

Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious threats. Let's delve into the tasks and functions that make Egyscan an indispensable tool in your security arsenal:

IDOR Forge is an advanced and versatile tool designed to detect Insecure Direct Object Reference (IDOR) vulnerabilities in web applications.

Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.

A encrypted, censorship-resistant mesh VPN making remote mobile forensics and network monitoring seamless.

Knock-Knock: A Live, Multi-Protocol Honeypot Dashboard of Internet Break-in Attempts - 13 Protocols, an Extensible Framework, and a Threat-Intelligence Database Serving a Public IP Blocklist Feed

Autonomous AI-powered security scanner — multi-agent vulnerability detection, exploitation, and validation engine

An open-source knowledge base of defensive countermeasures to protect AI/ML systems. Features interactive views and maps defenses to known threats from frameworks like MITRE ATLAS, MAESTRO, and OWASP.

A powerfull websites compiler/obfuscator for optimization or intellectual property protection purposes.

A platform to develop, run and administer CTF competitions. This is the online echoCTF.RED platform source code

Curso completo de Segurança Cibernética com conteúdos gratuitos em português.

Supervised, Hermes-native penetration testing profile with 35 routed playbooks, guarded target execution, persistent engagement state, evidence-backed findings, and release-gated reporting.

Open-source agentic security operations platform:

Defensive mitigation and testing toolkit for PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560), including Apache protections and PHP hardening guidance

Local-first privacy toolkit. Map yourself against 400+ data brokers, send CCPA/GDPR deletion mail, and check password dumps — the vault never leaves your PC.

Gulp it before burp — Ultra-fast native Rust web security testing, DAST scanner & HTTP/HTTPS/WebSocket proxy suite

Open source browser lab to build a simulated infrastructure, watch an attack move through it, and check whether your defense works.

A graphical user interface for hashcat, the password recovery utility