ifixai-ai / iFixAi
Independent Auditing of AI Agents. Run by human or the agent itself, to answer the most crucial question in the AI Agent Economy. Is the agent doing what is supposed to do? With iFixAi you can have this answer in less than 120 seconds.
interplains / Zero-Breach-Toolkit
Free, open-source, offline checks for traces of known mercenary spyware. Works on Windows, macOS and Linux, Android phones and iPhone backups.
AhmadHassan-BTed / ShopifyAutoAuth
Enterprise-grade Shopify Admin API authentication adapter — OAuth 2.0 Client Credentials Grant with automatic token refresh.
KillaBoi / StealMyBitcoin-PoC
A public release of the Steal My Bitcoin challenge
9bie / php2shell-bypass-aslr-exp
A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.
guillaumemeyer / watermarks-remover
A privacy-first app that strips AI watermarks from content you own.
mitmproxy / mitmproxy
An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
smicallef / spiderfoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
sherlock-project / sherlock
Hunt down social media accounts by username across social networks
interplains / zero-breach
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
Faceplugin-ltd / Open-Source-Face-Recognition-SDK
Face Recognition, Face Liveness Detection, Face Anti-Spoofing, Face Detection, Face Landmarks, Face Compare, Face Matching, Face Pose, Face Expression, Face Attributes, Face Templates Extraction, Face Landmarks
free-cracks / Adobe-Acrobat-Pro
Claims to be a pre-activated Windows installer for Adobe Acrobat Pro, distributed via a PowerShell download script.
GVCoder09 / NoDPI
NoDPI is a utility for bypassing the DPI (Deep Packet Inspection)
CarterPerez-dev / Cybersecurity-Projects
Building 70 Projects ranging from beginner to advanced so anyone can — learn from, build upon, use as a reference, or even copy directly. Owned by my cybersecurity company 👇
aimeoa / hanshuang-codex
针对GPT 6.0,workbuddyV4.1flash的破甲实验项目
antoniaci / blackbird
An OSINT tool to search for accounts by username and email in social networks.
Cygnux-Labs / Tracekit
Tamper-evident tracing, policy gates and cross-checks for AI agents: see what the agent did, and why.
arxhr007 / Aliens_eye
AI powered OSINT engine to discover and map 840+ social media identities across the web
qybaihe / bla
🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.
JoasASantos / php2shell-exploit
PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE
CloakHQ / CloakBrowser
Stealth Chromium that passes every bot detection test. Drop-in Playwright replacement with source-level fingerprint patches. 50+ tests passed.
xyz-rafael-xyz / roguard-child-safety
Romanian and Ukrainian child-safety structured-check toolkit and synthetic research records
google / mantis
A modular, stack-agnostic toolkit for AI coding agents to autonomously find, reproduce, and patch vulnerabilities.
semgrep / semgrep
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
laramies / theHarvester
E-mails, subdomains and names Harvester - OSINT
bethington / ghidra-mcp
Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker deployment.
mvt-project / mvt
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
UltraSultanHonor / recon-v1.7.0
Published: 2026-10-28
wirecrewmankiln / Serato-DJ-Pro
Serato DJ Pro 2025: Ready-to-run desktop installer with all features unlocked and fully activated.
pydantic / monty
A secure Python sandbox, written in Rust, for code written by AI.
LINGYK352 / Watchtower
Watchtower | Self-hosted AI security assessment, asset intelligence, and evidence workflows.
miscusi-peek / cheatengine-mcp-bridge
Connect your favorite AI agents directly to Cheat Engine via MCP. Automate reverse engineering, pointer scanning, and memory analysis using natural language.
joernio / joern
Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc
WGDashboard / WGDashboard
Simple dashboard for WireGuard VPN written in Python & Vue.js
arhappy777 / llm_pentesting
Defensive security evaluation, AI red teaming & guardrail testing for LLM apps and agents — vulnerable labs, case studies and test payloads