morluto / rea
MCP server and CLI that lets AI agents reverse engineer native binaries, JavaScript/Electron apps, .NET assemblies, and websites.
morluto / rea
NationalSecurityAgency / ghidra
Ghidra is an NSA-created software reverse engineering framework with disassembly, decompilation, graphing, and scripting for compiled code.
ifixai-ai / iFixAi
Python CLI and agent plugin that audits whether an AI agent does the job it is supposed to do, using adversarial and operational tests.
vxcontrol / pentagi
Self-hosted multi-agent system that autonomously plans and runs penetration tests using tools like nmap, Metasploit and sqlmap in Docker.
getlantern / lantern
Open-source VPN app for circumventing censorship and improving privacy and speed across desktop and mobile platforms.
tiann / KernelSU
A kernel-based root solution for Android devices, providing su and root access management via a kernel module and manager app.
gitleaks / gitleaks
Scans git repos, files, and stdin for hardcoded secrets such as passwords, API keys, and tokens.
agent-substrate / substrate
Zero-trust runtime that sandboxes and snapshots large numbers of untrusted agent workloads on standard Kubernetes.
topjohnwu / Magisk
Magisk is a open-source root solution for Android that modifies the system at boot without altering the system partition.
Lakr233 / vphone-cli
Runs a virtual iPhone on an Apple Silicon Mac using Apple's Virtualization.framework, for security research and debugging.
NVIDIA / OpenShell
OpenShell is a sandboxed runtime that enforces file, system call, and network policies on autonomous AI agents.
Armur-Ai / Pentest-Swarm-AI
Autonomous API and web-app penetration testing tool that runs a swarm of AI agents to chain exploits and prove vulnerabilities.
x64dbg / x64dbg
Open-source user-mode binary debugger for Windows, built for reverse engineering and malware analysis of executables without source.
SimoneAvogadro / android-reverse-engineering-skill
Claude Code skill that decompiles Android APK/XAPK/JAR/AAR files and extracts the HTTP APIs an app uses.
Autumn-27 / ScopeSentry
Distributed security asset discovery platform covering subdomain enumeration, port scanning, vulnerability scanning, and page monitoring.
bitwarden / server
Backend APIs, SQL Server database, and Docker deployment tooling for the Bitwarden password manager clients.
caddyserver / caddy
Extensible HTTP/1-2-3 web server written in Go that obtains and renews TLS certificates automatically by default.
KernelSU-Next / KernelSU-Next
Kernel-based root solution for Android devices, forked from KernelSU with additional features and fixes.
google / agentmesh
Agent Mesh is a private network that lets AI agents publish and discover tools and models, with verifiable node identities.
opa334 / TrollStore
iOS app that permanently installs IPA files by exploiting a CoreTrust signature verification bug.
openbao / openbao
Open-source, community-governed fork of HashiCorp Vault for storing, encrypting, and distributing secrets, certificates, and keys.
YuKongA / ghostlock-app
Android app that exploits CVE-2026-43499 to gain temporary root on supported kernels and load KernelSU.
wanghongenpin / proxypin
Cross-platform app for capturing, inspecting, and rewriting HTTP(S) traffic on Windows, macOS, Linux, Android, and iOS.
bethington / ghidra-mcp
MCP server that exposes Ghidra's reverse engineering capabilities as 200+ tools for AI assistants, via a GUI plugin and headless server.
trufflesecurity / trufflehog
Scans repositories, filesystems, and chats for leaked credentials, then verifies whether each one is still live.
SukiSU-Ultra / SukiSU-Ultra
Kernel-based root solution for Android devices, with a Kernel Patch Module (KPM) system for loadable kernel extensions.
docker-mailserver / docker-mailserver
Containerized full-stack mail server bundling Postfix, Dovecot, Rspamd, and ClamAV for SMTP, IMAP, and POP3 with config-file-based setup.
EchoStretch / kstuff-lite
Modified kstuff-lite PS4 kernel-exploit toolkit (1.11-opt) that optimizes UELF/KELF transitions, FPU/CR0 handling, and adds opt-in diagnostics.
oauth2-proxy / oauth2-proxy
Reverse proxy that adds OAuth2 and OIDC authentication in front of web applications, supporting many identity providers.