Reviewed project metadata and official links for red, blue, purple, and cross-team security work.
This is a dated, editorially reviewed seed. Links go to upstream projects or vendors. A listing is not authorization, safety certification, legal advice, or a recommendation to deploy a tool. Confirm scope, licensing, current maintenance, and your organization's rules before use.
Graph-based identity and attack-path analysis for offensive and defensive workflows.
Apache-2.0 unless a lower-level component license states otherwise.
Reviewed Oct 12, 2026
Active Directory Certificate Services assessment for offensive and defensive review.
MIT
Reviewed Oct 12, 2026
Software reverse-engineering framework for malware and vulnerability research.
Apache-2.0 core with GPL-3.0 support programs and separately licensed third-party components.
Reviewed Oct 12, 2026
Modular framework for controlled validation and adversary emulation.
3-Clause BSD for the framework; bundled dependencies have separate licenses.
Reviewed Oct 12, 2026
Web-server exposure and configuration assessment tooling.
GPL-3.0-only code; databases and LibWhisker have separate terms.
Reviewed Oct 12, 2026
Template-based exposure validation after explicit scope and authorization.
MIT
Reviewed Oct 12, 2026
Network vulnerability scanning component of Greenbone Community Edition.
GPL-2.0 family with file-level qualifiers.
Reviewed Oct 12, 2026
Point-in-time multi-cloud configuration and exposure assessment.
GPL-2.0
Reviewed Oct 12, 2026
Specialist SQL injection validation and database assessment tooling.
GPL v2 or later with project clarifications and exceptions.
Reviewed Oct 12, 2026
Black-box web and API application security scanner.
GPL-2.0
Reviewed Oct 12, 2026