ifixai-ai / iFixAi

Python CLI and agent plugin that audits whether an AI agent does the job it is supposed to do, using adversarial and operational tests.

NVIDIA / OpenShell

OpenShell is a sandboxed runtime that enforces file, system call, and network policies on autonomous AI agents.

gitleaks / gitleaks

Scans git repos, files, and stdin for hardcoded secrets such as passwords, API keys, and tokens.

getlantern / lantern

Open-source VPN app for circumventing censorship and improving privacy and speed across desktop and mobile platforms.

PatchMon / PatchMon

Web platform for monitoring, patching and compliance-scanning Linux server fleets via outbound-only agents.

cilium / cilium

eBPF-based networking, security, and observability layer for Kubernetes and other container platforms.

digininja / DVWA

A deliberately vulnerable PHP/MariaDB web app for practicing common web security flaws across adjustable difficulty levels.

thewhiteh4t / seeker

Hosts a fake location-permission page that captures a smartphone's GPS coordinates and device details from a visitor who clicks through.

OWASP / Top10

Official repository for the OWASP Top 10 document, a ranked list of the most critical web application security risks.

Armur-Ai / Pentest-Swarm-AI

Autonomous API and web-app penetration testing tool that runs a swarm of AI agents to chain exploits and prove vulnerabilities.

ShiftLeftSecurity / codepropertygraph

Specification and Scala tooling for the Code Property Graph, a language-agnostic representation of program code for analysis.

Orange-Cyberdefense / GOAD

Deployable vulnerable Active Directory lab environments for practicing pentest attack techniques.

tegal1337 / CiLocks

Bash toolkit for bypassing Android lockscreens and running ADB, Metasploit payload, IP-logger and webcam-capture tasks against target devices.

tailscale / tailscale-android

Official open source Android client for Tailscale, a WireGuard-based private mesh VPN network.

hak5 / usbrubberducky-payloads

Community payload library of DuckyScript keystroke-injection scripts for the Hak5 USB Rubber Ducky.

ValdikSS / GoodbyeDPI

Windows utility that bypasses ISP Deep Packet Inspection blocking of websites by manipulating outgoing HTTP and TLS traffic.

SkipToTheEndpoint / OpenIntuneBaseline

Community-maintained set of Microsoft Intune configuration baselines for Windows devices, built from CIS, NCSC, ACSC and Microsoft guidance.

docker-library / repo-info

Scripts that generate reports of extended metadata (licenses, layer details) for Docker Official Images.

apple / swift-crypto

Swift implementation of a large part of Apple's CryptoKit API for Linux and ARM64 Windows, backed by vendored BoringSSL and XKCP.