Explore all analyzed open source repositories
XSStrike is a Python XSS detection suite that analyzes responses with hand-written parsers and generates context-aware payloads. It supports reflected and DOM XSS scanning, crawling, fuzzing, parameter discovery, and WAF detection.
InactiveHealth 31/100
Coercer is a Python tool for assessing and triggering Windows server authentication through vulnerable RPC methods. It supports scan, coerce, and fuzz workflows, with results exportable as JSON, SQLite, or XLSX.
QuietHealth 25/100
BloodHound.py is a Python ingestor built on Impacket that collects Active Directory data for BloodHound analysis. It suits security teams and testers who need to map domain relationships, permissions, sessions, and local administrators.
MaintainedHealth 39/100
Docker Bench for Security is a Shell script that checks Docker hosts and containers against the CIS Docker Benchmark. It automates production security checks and helps teams identify areas to review and remediate.
QuietHealth 30/100
OWASP Juice Shop is a deliberately insecure web application built with TypeScript for security training, awareness demos, CTFs, and security-tool testing. Its challenges cover the OWASP Top Ten and other real-world application flaws.
ActiveHealth 61/100
DVWA is a deliberately vulnerable PHP/MariaDB web application for security professionals, developers, students, and teachers to practice common web vulnerabilities. Its difficulty levels and Docker setup make it useful for controlled training, not public deployment.
ActiveHealth 54/100
Fli is a Python library, CLI, and MCP server for searching Google Flights through its public search page. It provides flight and date searches with filters, plus a TypeScript port for JavaScript users.
ActiveHealth 59/100
uncover is a Go command-line tool that queries internet search engine APIs to find exposed hosts and ports. It brings results from multiple providers into a pipeline-friendly format for reconnaissance and attack-surface discovery.
ActiveHealth 46/100
OWASP Nettacker is a Python-based framework for automated penetration testing and information gathering across networks, web applications, IoT devices, and APIs. It combines modular scans with a CLI, REST API, and web UI for security professionals and ethical hackers.
ActiveHealth 61/100
webscreenshot is a Python command-line tool for capturing screenshots of website lists, based on the url-to-image PhantomJS script. It supports Windows and Linux, with PhantomJS as its default renderer and Chrome, Chromium, Edge Chromium, and Firefox as alternatives.
InactiveHealth 20/100
Google Workspace CLI builds commands dynamically from Google's Discovery Service, covering Drive, Gmail, Calendar, and other Workspace APIs. It returns structured JSON for scripts and AI agents, with agent skills included.
QuietHealth 40/100
ReelMimic turns a reference video and a brief into an original 2D animation, planned and produced on your computer with Claude Code or Codex. Review the plan, follow production, and comment on the finished video in a local web app.
NewHealth 62/100