zinja-coder / jadx-mcp-server
MCP server for JADX-AI Plugin
zinja-coder / jadx-mcp-server
nealbridges / VulnHunter
Agentic AI security scanner that hunts exploitable vulnerabilities like an adversary, proves them with executable PoCs, and fixes them test-first. A maintained fork of Capital One's VulnHunter, rebuilt for any agent harness.
awslabs / automated-security-helper
ASH is an extensible, open source SAST, SCA, and IaC security scanner orchestration engine.
tlsfuzzer / tlsfuzzer
SSL and TLS protocol test suite and fuzzer
hagezi / dns-servers
HaGeZi DNS: Free, Non-Commercial EU Public DNS Servers
Fausto-404 / js-reverse-automation--skill
结合chrome-devtools-mcp的能力并加上Skill的规范，实现JSRPC+Flask+autoDecoder方案的前端JS逆向自动化分析，提升JS逆向的效率
NVIDIA / SkillEvaluator
Multi-tier framework for evaluating AI agent skills with quality gates, semantic overlap detection, synthetic evaluation dataset generation, and live agent evaluation that measures how skills affect agent behavior.
fkie-cad / friTap
Simplifying encrypted traffic analysis for researchers by making protocol decryption effortless.
waybarrios / opencode-power-pack
54 rigorous skills for Codex, OpenCode, and Pi: code review, security audit, feature development, frontend design, MCP tools, Hugging Face ML/training, and more.
Breakthrough / DVR-Scan
:vhs: Tool for extracting scenes with motion from videos (e.g. security camera or DVR footage). Written in Python, uses OpenCV.
whitecircle / rise
RISE: Red-teaming via Iterative Strategy Evolution (NeurIPS 2026)
LINGYK352 / Watchtower
Watchtower | Self-hosted AI security assessment, asset intelligence, and evidence workflows.
RomanZhukov9 / Crypto-Recovery-Tool
Python-based cryptocurrency wallet forensics suite supporting 40+ wallet types on Windows, Linux, and macOS. Features encrypted vault analysis, wallet detection, seed recovery, multi-chain address derivation, threaded processing, and TXT/CSV/JSON export. Designed for security research, compliance, incident response, and blockchain investigations.
ElectronicCats / jieli-ble-badge-research
Reverse-engineering a JieLi AC707N/BR35 BLE e-badge (E87): BLE clients, pure-Python UFW tooling, chipkey/flash helpers, SDK build scripts, and self-built firmware. Security research / educational.
lupingQAQ / JGD
Autonomous agent that mines Java deserialization gadget chains from any JAR directory. Static bytecode analysis + dynamic JVM probes + dual-model adversarial auditing → weaponized PoC. Solving the last mile.
Krishita17 / PhantomTap
A Flipper Zero that stops guessing and starts reasoning: ML-guided RFID/NFC fuzzing & access-control auditing that turns raw card reads into a prioritized, explainable security assessment. Defensive-use only.
stamparm / maltrail
Malicious traffic detection system
CTFd / CTFd
CTFs as you need them
infobyte / faraday
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
ihebski / DefaultCreds-cheat-sheet
One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️
cowrie / cowrie
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
Trusted-AI / adversarial-robustness-toolbox
Adversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red and Blue Teams
Pennyw0rth / NetExec
The Network Execution Tool
google / clusterfuzz
Scalable fuzzing infrastructure.
dpgaspar / Flask-AppBuilder
Simple and rapid application development framework, built on top of Flask. includes detailed security, auto CRUD generation for your models, google charts and much more. Demo (login with guest/welcome) - http://flaskappbuilder.pythonanywhere.com/
intelowlproject / IntelOwl
IntelOwl: manage your Threat Intelligence at scale
ivre / ivre
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
alexandreborges / malwoverview
Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.
snooppr / snoop
Snoop — инструмент разведки на основе открытых данных (OSINT world)
RhinoSecurityLabs / cloudgoat
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
kelvinBen / AppInfoScanner
一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。
google / timesketch
Collaborative forensic timeline analysis
codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
gwen001 / pentest-tools
A collection of custom security tools for quick needs.
chipsec / chipsec
Platform Security Assessment Framework
GH05TCREW / pentestagent
PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.
snyk / agent-scan
Security scanner for AI agents, MCP servers and agent skills.
blackorbird / APT_REPORT
Interesting APT Report Collection And Some Special IOCs
opencve / opencve
Vulnerability Intelligence Platform
Impact-I / reFlutter
Flutter Reverse Engineering Framework
dirkjanm / ROADtools
A collection of Azure AD/Entra tools for offensive and defensive security purposes
outflanknl / RedELK
Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.
honmashironeko / ProxyCat
一款部署于云端或本地的隧道代理池中间件，可将静态代理IP灵活运用成隧道IP，提供固定请求地址，一次部署终身使用
Syslifters / sysreptor
A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.
OWASP / masvs
The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.
GrapheneOS / Vanadium
Privacy and security enhanced releases of Chromium for GrapheneOS. Vanadium provides the WebView and standard user-facing browser on GrapheneOS. It depends on hardening in other GrapheneOS repositories and doesn't include patches not relevant to the build targets used on GrapheneOS.
salesforce / policy_sentry
IAM Least Privilege Policy Generator
aws / aws-eks-best-practices
A best practices guide for day 2 operations, including operational excellence, security, reliability, performance efficiency, and cost optimization.
hannob / snallygaster
Tool to scan for secret files on HTTP servers
youngfish42 / Awesome-FL
Comprehensive and timely academic information on federated learning (papers, frameworks, datasets, tutorials, workshops)
msoedov / agentic_security
Agentic LLM Vulnerability Scanner / AI red teaming kit 🧪
microsoft / msticpy
Microsoft Threat Intelligence Security Tools
GitGuardian / ggshield
Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.
owtf / owtf
Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp
GhostManager / Ghostwriter
The SpecterOps project management and reporting engine
trailofbits / publications
Publications from Trail of Bits
vulnersCom / getsploit
Search and download public exploits from the Vulners database — online, or fully offline from a local SQLite FTS5 index.
privacyidea / privacyidea
:closed_lock_with_key: multi factor authentication system (2FA, MFA, OTP, FIDO Server)
Bert-JanP / Hunting-Queries-Detection-Rules
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
theupdateframework / python-tuf
Python reference implementation of The Update Framework (TUF)