ifixai-ai / iFixAi
Independent Auditing of AI Agents. Run by human or the agent itself, to answer the most crucial question in the AI Agent Economy. Is the agent doing what is supposed to do? With iFixAi you can have this answer in less than 120 seconds.
sherlock-project / sherlock
Hunt down social media accounts by username across social networks
usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
NVIDIA / SkillSpector
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
guillaumemeyer / watermarks-remover
A privacy-first app that strips AI watermarks from content you own.
morluto / awesome-reverse-engineering
Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.
DUNHKpcc / Claude-Guardian
Claude Guardian is an all-in-one Claude account safety and risk prevention skill.Claude防封实战 It intelligently assesses your device, account history, network environment, and payment options, then provides personalized guidance for local, VPS, or virtual machine setups.
reacher-z / Awesome-REA
Curated tools, case studies and papers for reverse engineering websites, games, apps, binaries, firmware and protocols. Source-reviewed, English and Chinese.
dankumarlab2090u1 / minecraft-hack-menu-2026
Minecraft Hack Menu 2026 — Powerful utility mod for 1.21.4 Fabric. KillAura, ESP, XRay, Flight, Scaffold, Crystal Aura and 150+ modules. Easy install, working November 2026.
MDX-Tom / gpt-instruct
A Codex jailbreak prompt and test pack for gpt. 针对 gpt 系列的 Codex 破甲提示词与测试包。
mitmproxy / mitmproxy
An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
soimy / c3rb3r-rescue
Evidence-based DSM ransomware recovery: preservation, RAM key recovery, copy decryption, and GitLab validation.
Tencent / AI-Infra-Guard
A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
harish-gaggar / mcp-server-gateway
MCP gateway & OAuth MCP servers. LangGraph agent: memory, eval/tracking, PII guard, context trimming. Docker quick start for enterprise agents.
andrewyng / openworker
Open-source desktop AI coworker that produces finished work like security reviews, documents, and triaged inbox items.
mvt-project / mvt
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
Cygnux-Labs / Tracekit
Tamper-evident tracing, policy gates and cross-checks for AI agents: see what the agent did, and why.
NVIDIA / garak
the LLM vulnerability scanner
throwaway96 / slopbro
PoC for jsserver vulnerability in webOS 3.5+(?)
aixisstudio / Snitch
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.
bunkerity / bunkerweb
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
wuyoscar / Internal-Safety-Collapse
[NeurIPS 2026] Safety failures in coding agents and frontier LLMs. Reproducible workspaces for studying when AI agents generate unsafe data during task completion.
arxhr007 / Aliens_eye
AI powered OSINT engine to discover and map 840+ social media identities across the web
google / mantis
A modular, stack-agnostic toolkit for AI coding agents to autonomously find, reproduce, and patch vulnerabilities.
ikow / php2shell-poc
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
KillaBoi / StealMyBitcoin-PoC
A public release of the Steal My Bitcoin challenge
GVCoder09 / NoDPI
NoDPI is a utility for bypassing the DPI (Deep Packet Inspection)
sanjayadanushka712 / Ghost-Night
Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.
MORTEN-BUUR / nordef-matrix-open-control
NORDEF Matrix Open Control: model-independent AI safety belt with 0/1/2 decisions, Ed25519 root gate, replay protection, evidence chain, and incident-pattern eval bank
JoasASantos / php2shell-exploit
PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE
janderson1017 / Hiddify-Manager
Multi-user anti-filtering panel, with an effortless installation and supporting more than 20 protocols to circumvent filtering plus the telegram proxy.