ifixai-ai / iFixAi

Python CLI and agent plugin that audits whether an AI agent does the job it is supposed to do, using adversarial and operational tests.

cloudflare / security-audit-skill

A coding-agent skill that runs multi-phase security audits with isolated agents and independently verified, machine-readable findings.

vxcontrol / pentagi

Self-hosted multi-agent system that autonomously plans and runs penetration tests using tools like nmap, Metasploit and sqlmap in Docker.

zhaoxuya520 / reverse-skill

A routing pack that tells AI coding agents which reverse-engineering or pentest methodology and tools to use for APKs, binaries, JS crypto, PCAPs, and CTFs.

getlantern / lantern

Open-source VPN app for circumventing censorship and improving privacy and speed across desktop and mobile platforms.

gitleaks / gitleaks

Scans git repos, files, and stdin for hardcoded secrets such as passwords, API keys, and tokens.

rawfilejson / awesome-osint-arsenal

Curated list and one-command installer for 750+ open-source intelligence and security tools across 50 categories.

topjohnwu / Magisk

Magisk is a open-source root solution for Android that modifies the system at boot without altering the system partition.

NVIDIA / OpenShell

OpenShell is a sandboxed runtime that enforces file, system call, and network policies on autonomous AI agents.

Armur-Ai / Pentest-Swarm-AI

Autonomous API and web-app penetration testing tool that runs a swarm of AI agents to chain exploits and prove vulnerabilities.

x64dbg / x64dbg

Open-source user-mode binary debugger for Windows, built for reverse engineering and malware analysis of executables without source.

openbao / openbao

Open-source, community-governed fork of HashiCorp Vault for storing, encrypting, and distributing secrets, certificates, and keys.

edoardottt / awesome-hacker-search-engines

A curated Markdown list of search engines for security work, covering servers, vulnerabilities, exploits, leaks, and threat intelligence.

wanghongenpin / proxypin

Cross-platform app for capturing, inspecting, and rewriting HTTP(S) traffic on Windows, macOS, Linux, Android, and iOS.

OWASP / wstg

A community-written guide covering methods and test cases for security testing web applications and web services.

openssl / openssl

General-purpose toolkit implementing TLS, DTLS, and QUIC protocols on top of a standalone cryptographic library and CLI.

oauth2-proxy / oauth2-proxy

Reverse proxy that adds OAuth2 and OIDC authentication in front of web applications, supporting many identity providers.