morluto / rea

MCP server and CLI that lets AI agents reverse engineer native binaries, JavaScript/Electron apps, .NET assemblies, and websites.

NationalSecurityAgency / ghidra

Ghidra is an NSA-created software reverse engineering framework with disassembly, decompilation, graphing, and scripting for compiled code.

cloudflare / security-audit-skill

A coding-agent skill that runs multi-phase security audits with isolated agents and independently verified, machine-readable findings.

zhaoxuya520 / reverse-skill

A routing pack that tells AI coding agents which reverse-engineering or pentest methodology and tools to use for APKs, binaries, JS crypto, PCAPs, and CTFs.

getlantern / lantern

Open-source VPN app for circumventing censorship and improving privacy and speed across desktop and mobile platforms.

gitleaks / gitleaks

Scans git repos, files, and stdin for hardcoded secrets such as passwords, API keys, and tokens.

rawfilejson / awesome-osint-arsenal

Curated list and one-command installer for 750+ open-source intelligence and security tools across 50 categories.

Lakr233 / vphone-cli

Runs a virtual iPhone on an Apple Silicon Mac using Apple's Virtualization.framework, for security research and debugging.

NVIDIA / OpenShell

OpenShell is a sandboxed runtime that enforces file, system call, and network policies on autonomous AI agents.

Armur-Ai / Pentest-Swarm-AI

Autonomous API and web-app penetration testing tool that runs a swarm of AI agents to chain exploits and prove vulnerabilities.

x64dbg / x64dbg

Open-source user-mode binary debugger for Windows, built for reverse engineering and malware analysis of executables without source.

SimoneAvogadro / android-reverse-engineering-skill

Claude Code skill that decompiles Android APK/XAPK/JAR/AAR files and extracts the HTTP APIs an app uses.

Autumn-27 / ScopeSentry

Distributed security asset discovery platform covering subdomain enumeration, port scanning, vulnerability scanning, and page monitoring.

caddyserver / caddy

Extensible HTTP/1-2-3 web server written in Go that obtains and renews TLS certificates automatically by default.

opa334 / TrollStore

iOS app that permanently installs IPA files by exploiting a CoreTrust signature verification bug.

edoardottt / awesome-hacker-search-engines

A curated Markdown list of search engines for security work, covering servers, vulnerabilities, exploits, leaks, and threat intelligence.

bethington / ghidra-mcp

MCP server that exposes Ghidra's reverse engineering capabilities as 200+ tools for AI assistants, via a GUI plugin and headless server.

trufflesecurity / trufflehog

Scans repositories, filesystems, and chats for leaked credentials, then verifies whether each one is still live.

docker-mailserver / docker-mailserver

Containerized full-stack mail server bundling Postfix, Dovecot, Rspamd, and ClamAV for SMTP, IMAP, and POP3 with config-file-based setup.