Infosec GitHub Repositories (2026) · Open Source Tools

Hunt down social media accounts by username across social networks

🕵️‍♂️ Collect a dossier on a person by username from 6K websites

Fast web fuzzer written in Go

IoT static scanner for secrets, SBOM, CVEs and more.

CVE proof-of-concept labs, exploit scripts, and detection/prevention rules (Nginx, Apache, Snort, YARA) for high-severity CVEs. Authorized security testing & research only.

Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.

Search public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context.

:key: Hash type identifier (CLI & lib)

Dradis Framework: Collaboration and reporting for IT Security teams

Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance through execution and reporting. With built-in command automation, output parsing, and AI‑assisted summaries, it delivers faster, more structured, and high‑quality security assessments.

A (hopefully) actively maintained activity-based-autosorted list of InfoSec Streamers

Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.

The Network Execution Tool

Add a layer of active defense to your cloud applications.

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

Pentest Report Generator

Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?

Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.

Nyxstone: assembly / disassembly library based on LLVM, implemented in C++ with Rust and Python bindings, maintained by emproof.com

ScanT3r - Module based Bug Bounty Automation Tool ( use Lotus instead github.com/bugBlocker/lotus )