lordx64 / pentestkit
Autonomous multi-agent pentest framework — plans, exploits, verifies (proof-required), CVSS-scores and writes client-ready reports. 104/104 (100%) on the XBOW validation benchmarks, powered by Kimi K3.
lordx64 / pentestkit
libnyx / LT2MD
AI-agent skill producing reusable Markdown from PDFs. It turns flowcharts, diagrams, and charts into text beside each caption instead of empty links. It checks an earlier conversion against the PDF and fixes misread or missing parts. Long PDFs run in small saved batches with an independent review pass, each paragraph tagged with its page.
eldarshiraliyev / BugScanner
🐛 Advanced web vulnerability scanner with 5-rule false-positive reduction, WAF evasion, and modern HTML reports
kina-cmd / agent-skill-sync
Scan, classify (A/B/C/D) and sync AI-agent SKILL.md files across toolchains (Codex, Claude Code, WorkBuddy). Zero-dependency Python CLI.
Inspired-by-Atmosphere / pulse-path
A linked-list discipline for knowledge, memory and pointer hygiene in large projects: five laws plus portable Python engines (declarative rule table, dry-run health check, link-integrity scan).
pooooooriya / salsi
Write Persian with Persian words — a loanword scanner and an AI-assistant skill built on the Pasban dictionary. Ships 20,071 words, protects technical terms, code and quotations. Works in Claude, Codex, Cursor and more.
Janina21 / Crypto-Checker
Python-based crypto wallet analysis tool with multi-threaded address and seed phrase checking (up to 50 threads). Supports Bitcoin, Ethereum, Solana, BNB Chain, Polygon, and EVM networks. Includes proxy rotation, portfolio aggregation, USD valuation, token scanning, and TXT/CSV/JSON export for auditing, research, and analytics.
hayatky / sdr-dtv-poc
Experimental SDR digital TV receiver PoC with a web UI for channel scanning, viewing, and short TS recordings.
etherscan / skills
Agent Skills for working with Etherscan and on-chain data. These skills let AI agents turn raw Etherscan API responses into structured, verifiable output — every address, amount, and transaction hash comes from a live API call, never invented.
erfnzdeh / mini-c-compiler
A compiler for a small C-like language, written from scratch in Python: table-driven DFA scanner, transition-diagram predictive parser generated from a plain-text grammar with FIRST/FOLLOW sets, semantic analysis and three-address code generation onto a 12-instruction stack VM.
beskvladimir-create / tsiolkovsky-papers
Machine-readable catalogue of fond 555 (K.E. Tsiolkovsky), Archive of the Russian Academy of Sciences: all 2,019 files, 51,008 scans, plus the retrieval pipeline.
DeathShotXD / Comment2Shell
Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker
heretic-tech / apostate
Apostate is a 100% free, fully open-source anti-detect browser built on Chromium. Defeats every major commercial fingerprint detector with zero paywalls and fully verifiable GitHub Actions builds. 153 patches. FPJS Pro: suspect score 0. BrowserScan: 100% authentic. deviceandbrowserinfo.com: human. bot.sannysoft.com: all green. With proof.
BushANQ / DRX-Operator
—
duriantaco / ravage
AI powered web security testing for authorized targets
knowbe4 / frieren-dast-ai
AI-driven Dynamic Application Security Testing tool for security engineers. Combines an HTTPS MITM proxy with a multi-agent scanner and a real-time web dashboard. Route any browser or tool through the proxy — findings appear automatically.
OshekharO / Jio-Gemini-Activation-Scanner
Automated scanner for Jio Gemini (Google AI) activation links using exposed Firebase Realtime Database panels and Jio's public APIs.
san3ncrypt3d / vulnometry
Measure what a vulnerability is worth to your business, not how severe it is in the abstract. Business Exposure Index scoring over NVD, EPSS, CISA KEV, OSV and GHSA.
overspace-labs / HaESkill
HaE Skill: rule-driven sensitive information scanning for local files, powered by ripgrep
xiabai2008 / ruoyi-scan
RuoYi (若依) dedicated vulnerability scanner: plugin architecture, three-state verdict, WAF bypass, exploit chains, AI POC generation, nuclei compatible. 若依专项漏洞扫描器
arpanpathak / gpu-parallel-book
📖 GPU parallel programming from the ground up : CUDA C++ and Rust 🦀 kernels paired with clickable SVG 2D/3D architecture diagrams (warps, SMs, memory tiers). Includes reduction, scan, matmul, and a full image‑processing capstone
selvarajmurugesan90 / ops-engineering-skills
Open-source, cross-agent Agent Skills for DevOps, DevSecOps, Cloud, Kubernetes/platform engineering, CI/CD tooling, GitOps/Argo, policy, security scanning, SRE, standards/compliance, MLOps, AgentOps, and enterprise collaboration. Build once, use in Claude Code, GitHub Copilot, OpenAI Codex, Cursor and Gemini CLI.
Synpath-ai / prediction-market-arbitrage-trading-bot
Scans Kalshi and Polymarket for arbitrage opportunities, runs the strategy as paper trading on live prices, and backtests it. Built with https://synpath.dev
rohanpandula / ScanStudio
A modern Mac app and open driver for the Nikon Super Coolscan 5000 ED
sahroush / profdash
Self-hosted professor outreach tracker for prospective CS grad students: CSRankings import, AI-assisted scoring, Gmail reply scanning, local-first dashboard.
TDK-99 / SnapplAI
🔍 Stop refreshing LinkedIn. This pipeline scrapes new job listings based on your settings, uses AI agents to summarize each one and score it against your CV, then delivers only the best matches straight to your inbox 📬 — so you're always first to apply 🚀
pranjalm37 / race-condition-exploiter
TOCTOU race condition research toolkit: vulnerable/patched samples, a CLI race harness, an AST-based scanner, and a live demo
ErSilh0x / VULNaware
Open-source vulnerability prioritization engine that enriches scanner findings with vulnerability intelligence, identifies urgent risks, and automates alerts and ITSM ticketing.
mr-ravi26 / alpha-hunt
alpha-hunt — an autonomous job-hunting edge: scans company career pages every 15 minutes, auto-submits ATS applications the moment it's confident, sniffs out the wider market via Adzuna, and pings you on Telegram the second something worth chasing shows up.
imbas007 / POC-CVE-2026-60206
cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security
Tangruwo / RuwoScan
基于多智能体架构与自主决策机制，配合大语言模型的理解能力，输入自然语言指令，AI 自动完成从目标侦察到漏洞验证的完整渗透测试流程。
Rimagination / scansci-harness
ScanSci Harness — evidence-first AI research workbench powered by Pi.
MorDavid / NucleiSniper
AI-powered Nuclei template prioritization using deep target fingerprinting and TypeSafe Jev to surface relevant security findings faster.
gustaffsonKotte / qlo
Pump.fun graduation scanner — alerts on tokens that took hours to fill their curve
vdmrcll / ai-texture-delighter
AI Powered Texture De-lighting for 3D scanned assets.
shriramkv / agentsmd-init
Scaffold a high-quality AGENTS.md from a repository scan.
1diot9 / VulnHunter-White
基于 LLM 的白盒漏洞挖掘 Agent。四条挖掘路径（启发式、快速扫描 Sink 回溯、历史漏洞绕过、无约束）+ Docker 靶场 / 局部 harness / 静态验证，支持互联网复现与攻击链串联。 LLM-based white-box vuln mining agent. Four paths (heuristic, fast-scan sink backtrace, historical bypass, unconstrained) + Docker lab / harness / static verify; Internet retest and attack chains.
Rimagination / scansci-svg
Scientific SVG illustration skill with semantic editing and morphology references. Recommended model: GPT-6 Astra.
tc4dy / CVE-2026-54121-PoC-Exploit
CVE-2026-54121 - CertiGhost AD CS Multi-Exploit Framework | Rogue DC + LDAP spoofing, certificate abuse, PKINIT hash extraction, auto DCSync. Safe Checker + full exploit, multi-threaded mass scan, Shodan integration, JSON/CSV/JSONL output. CVSS 8.8 High. Use Ethically, Stay Legal :v
cramen / modbus_connector
Cross-platform Modbus toolkit (PySide6): master client with register table, polling, live graphs, alarms and bus scanner; device simulator (slave) with register map and expression rules; passive RTU sniffer. EN/RU UI.
Adolanium / hermes-plugin-shodan
Shodan.io for Hermes Agent. Host intel, search, DNS, CVE lookups, monitoring and on-demand scanning, with credit budgeting and response shaping that keeps results inside the context window.
devtooligan / jevscan-evm
—
SagarBiswas-MultiHAT / NmapScanningTool
A secure, production-ready Python CLI wrapper for Nmap that makes powerful scans easy and repeatable. Includes 12 built-in profiles (SYN, aggressive, OS detection, vulnerability/NSE checks), interactive and non-interactive modes, strict input validation, Docker support, CI, and script-friendly flags for automation.
mrhustlex / Trading-Masters-Strategies
Swing/momentum trading master methods as skills + yfinance scanners: O'Neil CAN SLIM, Weinstein Stage, Darvas Box, Wyckoff, Minervini VCP. Verified on real data.
XiantingWu / PQCensus
Evidence-grounded cryptographic inventory and post-quantum migration planning for software repositories. Local static analysis, zero mandatory runtime dependencies, SARIF and CycloneDX output.