工具说明为英文。

技术工具雷达: Cybersecurity

雷达筛选条件

工具排名

按实测增长排序，并在不同来源间归一化。 原始值保留各自的数据窗口；计算变化需要 7 天内至少两次测量。

  1. 1

    其他
    活跃

    KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.

    C++
    • cross-platform
    • hacktoberfest
    • keepass
    • keepassxc
    • linux

    github实测增长打开来源 ↗

    28 659GitHub 星标+57 (+0.20 %)
  2. 2

    其他
    活跃

    PoCs and exploits for CVEs discovered by NebuSec.

    C许可证: Apache-2.0

      github实测增长打开来源 ↗

      1 472GitHub 星标+23 (+1.6 %)
    • 3

      其他
      活跃

      the LLM vulnerability scanner

      Python许可证: Apache-2.0
      • ai
      • llm-evaluation
      • llm-security
      • security-scanners
      • vulnerability-assessment

      github实测增长打开来源 ↗

      9 079GitHub 星标+31 (+0.34 %)
    • 4

      其他
      活跃

      Fully autonomous AI Agents system capable of performing complex penetration testing tasks

      Go许可证: MIT
      • ai-agents
      • ai-security-tool
      • anthropic
      • autonomous-agents
      • golang

      github实测增长打开来源 ↗

      22 255GitHub 星标+23 (+0.10 %)
    • 5

      其他
      活跃

      A modern platform for visual, flexible, and extensible graph-based investigations. For cybersecurity analysts and investigators.

      TypeScript许可证: Apache-2.0
      • investigation
      • osint
      • python
      • recon

      github实测增长打开来源 ↗

      7 777GitHub 星标+18 (+0.23 %)
    • 6

      其他
      活跃

      网络安全日报—每日推送；Daily updated report on cybersecurity hotspots

      HTML
      • cybersecurity
      • hacker-news
      • html
      • security
      • vulnerability

      github实测增长打开来源 ↗

      118GitHub 星标+4 (+3.5 %)
    • 7

      其他
      活跃

      渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

      HTML许可证: Apache-2.0
      • authentication-bypass
      • bypass
      • cobalt-strike
      • csrf
      • csrf-webshell

      github实测增长打开来源 ↗

      7 480GitHub 星标+8 (+0.11 %)
    • 8

      其他
      活跃

      (◕‿‿◕) - Pwnagotchi 64-Bit AI Edition

      JavaScript
      • ai
      • bettercap
      • deep-learning
      • deep-neural-network
      • deep-reinforcement-learning

      github实测增长打开来源 ↗

      115GitHub 星标+2 (+1.8 %)
    • 9

      其他
      活跃

      A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.

      Python
      • cape
      • cdsa
      • chhb
      • cpts
      • hackthebox

      github实测增长打开来源 ↗

      2 565GitHub 星标+4 (+0.16 %)
    • 10

      其他
      活跃

      Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.

      Go许可证: MIT
      • brute-force-attacks
      • bruteforce
      • credential-testing
      • cybersecurity
      • ftp

      github实测增长打开来源 ↗

      2 529GitHub 星标+4 (+0.16 %)
    • 11

      其他
      活跃

      Cloud-native SIEM for intelligent security analytics for your entire enterprise.

      Python许可证: MIT
      • cybersecurity
      • sample-code

      github实测增长打开来源 ↗

      6 084GitHub 星标+4 (+0.07 %)
    • 12

      其他
      活跃

      GNU Radio – the Free and Open Software Radio Ecosystem

      C++许可证: GPL-3.0
      • c-plus-plus
      • cybersecurity
      • dsp
      • flowgraph
      • gnu

      github实测增长打开来源 ↗

      6 243GitHub 星标+3 (+0.05 %)
    • 13

      其他
      活跃

      Windows native ETW inspection suite for browsing providers, reading metadata, consuming live events, recording ETL traces, filtering results, and inspecting ETL/JSON/CSV recordings from one desktop tool.

      C#许可证: GPL-3.0
      • blue-team
      • blueteam
      • csharp
      • cybersecurity
      • defense

      github实测增长打开来源 ↗

      111GitHub 星标+1 (+0.91 %)
    • 14

      其他
      活跃

      Vulnerability Static Analysis for Containers

      Go许可证: Apache-2.0
      • clair
      • containers
      • docker
      • go
      • kubernetes

      github实测增长打开来源 ↗

      11 054GitHub 星标+2 (+0.02 %)
    • 15

      其他
      活跃

      OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

      Java许可证: Apache-2.0
      • ant-task
      • build-tool
      • gradle-plugin
      • jenkins-plugin
      • maven-plugin

      github实测增长打开来源 ↗

      7 679GitHub 星标+2 (+0.03 %)
    • 16

      其他
      活跃

      A Anti-DDoS script to protect Nginx web servers using Lua with a HTML Javascript based authentication puzzle inspired by Cloudflare I am under attack mode an Anti-DDoS authentication page protect yourself from every attack type All Layer 7…

      Lua许可证: MIT
      • anti-ddos
      • anti-ddos-script
      • antiddos
      • cloudflare
      • ddos

      github实测增长打开来源 ↗

      1 631GitHub 星标+1 (+0.06 %)
    • 17

      其他
      活跃

      MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to…

      PowerShell许可证: MIT

        github实测增长打开来源 ↗

        3 277GitHub 星标+1 (+0.03 %)
      • 18

        其他
        活跃

        Fully featured and community-driven hacking environment

        Python
        • ctf
        • docker
        • hacking
        • linux
        • penetration-testing

        github实测增长打开来源 ↗

        3 077GitHub 星标+1 (+0.03 %)
      • 19

        其他
        活跃

        Nmap NSE scripts that turn a service scan into CVEs, CVSS scores and known exploits — fingerprints software from HTTP responses and checks every detected CPE against the Vulners database.

        Lua
        • cpe
        • cve
        • cvss
        • exploit-database
        • fingerprinting

        github实测增长打开来源 ↗

        3 418GitHub 星标稳定

      学习与参考资源

      按实测增长排序，并在不同来源间归一化。 这些资源可单独访问，不参与主要排名。

      1. 1

        IKONA-Security

        其他
        活跃打开来源 ↗

        🛡️ Comprehensive Cybersecurity Arsenal, Bug Bounty Payloads & Security Audit Tools by IKONA ONI

        Python
        • awesome-list
        • bug-bounty
        • cybersecurity
        • ethical-hacking
        • ikona
        github资源实测增长
        117GitHub 星标+7 (+6.4 %)
      2. 2

        h4cker

        其他
        活跃打开来源 ↗

        This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit…

        Jupyter Notebook许可证: MIT
        • ai
        • ai-security
        • artificial-intelligence
        • awesome-list
        • awesome-lists
        github资源实测增长
        29 247GitHub 星标+31 (+0.11 %)
      3. 3

        Security-101

        其他
        活跃打开来源 ↗

        8 Lessons, Kick-start Your Cybersecurity Learning.

        HTML许可证: CC0-1.0
        • appsec
        • cia-triad
        • data-protection
        • data-security
        • iam
        github资源实测增长
        6 842GitHub 星标+6 (+0.09 %)
      4. 4

        personal-security-checklist

        其他
        活跃打开来源 ↗

        🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026

        TypeScript
        • awesome
        • awesome-list
        • censorship
        • checklist
        • cybersecurity
        github资源实测增长
        22 242GitHub 星标+5 (+0.02 %)
      5. 5

        awesome-hacker-search-engines

        其他
        活跃打开来源 ↗

        A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

        Shell许可证: MIT
        • awesome
        • awesome-list
        • awesome-lists
        • bugbounty
        • cve
        github资源实测增长
        11 120GitHub 星标+4 (+0.04 %)
      6. 6

        cariddi

        其他
        活跃打开来源 ↗

        Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

        Go许可证: GPL-3.0
        • bugbounty
        • crawler
        • crawling
        • endpoint-discovery
        • endpoints
        github资源实测增长
        3 759GitHub 星标+2 (+0.05 %)