从 65,707 个高星开源项目里，
找到你要的下一个。

Anthropic-Cybersecurity-Skills 是用 Python 编写的安全工具，面向安全研究与防护，主打注重安全。

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 …

atomic-red-team 是用 C 编写的开源项目，主题标签有限，建议打开仓库查看具体用途，主打轻量。

Small and highly portable detection tests based on MITRE's ATT&CK.

kubescape 是用 Go 编写的运维工具，用于部署、编排与监控，主打注重安全、开源免费。

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, complianc…

RedTeam-Tools 是一个安全工具，面向安全研究与防护。

Tools and Techniques for Red Team / Penetration Testing

caldera 是用 Python 编写的安全工具，面向安全研究与防护。

Automated Adversary Emulation Platform

sysmon-modular 是用 Go 编写的安全工具，面向安全研究与防护。

A repository of sysmon configuration modules

EVTX-ATTACK-SAMPLES 是用 HTML 编写的安全工具，面向安全研究与防护。

Windows Events Attack Samples

fibratus 是用 Go 编写的安全工具，面向安全研究与防护，主打注重安全。

Security sensor for realtime threat detection and protection

attack-navigator 是用 TypeScript 编写的安全工具，面向安全研究与防护。

Web app that provides basic navigation and annotation of ATT&CK matrices

Shuffle 是用 JavaScript 编写的安全工具，面向安全研究与防护，主打注重安全。

Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.

stratus-red-team 是用 Go 编写的安全工具，面向安全研究与防护。

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

AiSOC 是用 Python 编写的 AI 工具，用于大模型与智能体应用开发，主打注重安全、开源免费、适合生产环境。

Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every ag…

pentest-ai-agents 是用 Shell 编写的安全工具，面向安全研究与防护，主打注重安全。

Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, anal…

adversary_emulation_library 是用 C 编写的安全工具，面向安全研究与防护。

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

Certified-Kubernetes-Security-Specialist 是用 AGS Script 编写的运维工具，用于部署、编排与监控，主打注重安全。

Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please pro…

awesome-soc 是一个安全工具，面向安全研究与防护。

A curated knowledge base to build, run and mature a SOC (including CSIRT).

cve-mcp-server 是用 Python 编写的安全工具，面向安全研究与防护，主打注重安全。

Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, …

Incident-Playbook 是一个安全工具，面向安全研究与防护。

GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]

BLUESPAWN 是用 C++ 编写的安全工具，面向安全研究与防护。

An Active Defense and EDR software to empower Blue Teams

attackgen 是用 Python 编写的安全工具，面向安全研究与防护，主打功能完整。

AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK fra…

ThreatHunting 是一个开源项目，主题标签有限，建议打开仓库查看具体用途。

A Splunk app mapped to MITRE ATT&CK to guide your threat hunts

stride-gpt 是用 Python 编写的安全工具，面向安全研究与防护。

An AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat models for a given application based on the STRIDE methodol…

Open-Source-Security-Guide 是用 Go 编写的安全工具，面向安全研究与防护，主打注重安全、开源免费。

Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchma…

sentinel-attack 是一个安全工具，面向安全研究与防护。

Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK