security-toolset 开源项目推荐（22 个）

codingo /NoSQLMap

自动化NoSQL数据库列举和Web应用程序开发工具。

pulumi /esc

Pulumi ESC is a centralized, secure service for environments, secrets, and configuration management, optimized for multi-cloud infrastructures and applications.

Tanq16 /containerized-security-toolkit

Multi-arch Docker images to perform security operations via containerized workflows.

wadecalvin9 /ByteCode

ByteCode is a modern C2 that prioritizes operational security and evasion effectiveness. Built from the ground up with a React-based management console, Node.js orchestration engine, and cross-platform Go agents with advanced Windows evasion primitives.

capture0x /YeepForge

Automated web application penetration testing framework: OWASP Top 10 + advanced attacks, an autonomous AI agent (Ollama/Claude/OpenAI), SAST source-code analysis, and an MCP server, with professional CVSS-scored reports.

Saiprasad16 /MapNoSQL

Automated NoSQL database enumeration and web application exploitation tool.

codekuu /Gitlab-Scanner

A Python based gitleaks wrapped tool to enable scanning of multiple Gitlab repositories in parallel.

MeGysssTaa /access-warden

A powerful toolkit for enforcing access restrictions in Java

syedsharjeelshah /Shadowlogger

Shadowlogger is a lightweight, Python-based Windows keylogger and clipboard capture tool developed for authorized Red Team simulations, cybersecurity research, and educational purposes only.

wburolii /Discord-Token-Protector

A lightweight Windows security tool that monitors Discord for token grabbers, JS injections, clipboard hijacking, browser cookie access, startup persistence, and suspicious processes—all in real time.

bitwire-it /Probe-CVE-2026-98432

Local kernel version checker, remote MPTCP capability probe, and interactive scan-and-probe CLI for assessing exposure to the Linux kernel IPv4 TCP use-after-free (CVSS 9.8).

QaisCyber /webhack

An advanced, automated Web Pentesting framework that integrates industry-standard tools (SQLmap, Nmap, Dalfox, etc.) into a unified, interactive interface.

tvedad /VEDAD-Terminal

Self-hosted OSINT dashboard: 438+ keyless recon tools, a live 3D threat globe, and batch/case investigation workflows. No API keys required.

soluzka /Isolation_Bytes

learning/research project AV Desktop App

Kali-ai007 /SecureFlow

DevSecOps security scanner for automated vulnerability detection in CI/CD pipelines

here-is-leo /Moscow

🇷🇺 Advanced WordPress Security Research Plugin | HACKED BY HERE IS LEO | Multi-Backdoor System, Self-Destruct in 50 Hours, Deface Page, 10+ Entry Points, Educational & Research Purposes

SUALBA /Dashboard-SIEM-Interactivo

# 🛡️ Dashboard SIEM Interactivo Este proyecto es una **herramienta de visualización de eventos de seguridad tipo SIEM**, desarrollada con **Python y Dash**, e inspirada en plataformas profesionales como **Wazuh**. Es una iniciativa creada como parte de mi aprendizaje en: - Ciberseguridad - Visualización de datos - Desarrollo web con Python

v4l-obscuraproject /DorkRecon

DorkRecon is a domain reconnaissance tool generating Google dork queries (site:, filetype:, etc.) to find indexed, exposed data like configs, backups, and login pages. Designed for authorized penetration testing and red teaming, it checks domain exposure to secure leaks. It does not look up people and requires explicit authorization to run.

Muhammad-Muzammil-Khokhar /CSF-WARP

Menu-driven Kali Linux console for orchestrating authorized pentest tools.

liuyan303 /PentestGUI

Windows 图形化渗透测试工作台。把 Nmap、Masscan、Nuclei、httpx、Subfinder、ffuf、sqlmap、Hydra、Metasploit、TShark 等工具装进一个界面，支持自动一条龙扫描并生成 HTML/PDF 报告，界面中英双语。Graphical pentest workbench for Windows.