Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision

Agent that performs thorough security audits on your codebase, part of Vigolium

A Pi-native extension for thorough, agentic security audits

Vigolium Burp Suite extension for sending HTTP traffic to the Vigolium security scanning engine, reviewing the resulting findings, and synchronizing traffic in both directions

AI agent toolkit: unified LLM API, agent loop, TUI, coding agent CLI

OSINT power without API key hassle

IP Lookups for Open Ports and Vulnerabilities from internetdb.shodan.io

Community Workflow for the Osmedeus Engine that describes basic reconnaissance methodology for you to build your own

Build your own reconnaissance system with Osmedeus Next Generation

A Modern Orchestration Engine for Security

Collection of auxiliary command line tools

Default signature for Jaeles Scanner

Take a list of domains/subdomains and probe for working http/https server.

Gospider - Fast web spider written in Go

A simple tool to detect wildcards domain based on Amass's wildcards detector.

The Swiss Army knife for automated Web Application Testing

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security,…