AISecurityLab / hackagent

HackAgent is an open-source security toolkit to detect vulnerabilities of your AI Agents

chronicle / detection-rules

Collection of example YARA-L rules for use within Google Security Operations

GACWR / OpenUBA

A robust, and flexible open source User & Entity Behavior Analytics (UEBA) framework used for Security Analytics. Developed with luv by Data Scientists & Security Analysts from the Cyber Security Industry. [BETA]

CrowdStrike / falconpy

The CrowdStrike Falcon SDK for Python

Rose22 / openlumara

handwritten harness for AI, not vibecoded, everything is a module/plugin, tailor made for use with local models, tiny system prompt (around 1k by default), support for exclusive llamacpp features, strong security, strict zero-trust-in-the-ai policy (the code hard limits the ai, no amount of prompt engineering will bypass it)

liu00222 / Open-Prompt-Injection

This repository provides a benchmark for prompt injection attacks and defenses in LLMs

pis10 / TraceSurface

发现藏在前端代码里的 API，验证未授权访问风险 · 动态浏览器追踪 × JavaScript 静态分析

kulkarnirohit123 / cra-agent

Autonomous agentic AI for CRA (Cyber Resilience Act) compliance: scans repos, triages findings, opens Jira tickets, and auto-fixes vulnerabilities via PR.

jasonzhang06-source / sharelint

Local privacy preflight for files, folders, and archives—catch secrets, PII, metadata, and hidden document content before sharing.

martian56 / redcell

AI red-team platform. Autonomous LLM agents run a penetration test end to end inside a Kali container and write the report. LangGraph plan/act engine, provider-agnostic models via LiteLLM, PDF/JSON/SARIF output. FastAPI + React.

xiaYuTian11 / maskit

数据面具 Data Maskit — 专为大模型打造的本地隐私脱敏网关（请求自动打码，回复流式还原；支持 Cursor / Claude Code / Codex / Pi 等任意可配 Base URL 工具）

dagoSte / squadra

Coordinate Claude, Codex and Cursor windows with shared tasks, acknowledgements, prechecks, parallel tests, source-bound proofs and independent review. Built-in skills recall lessons, simplify code and forecast work. Track progress, decisions and evidence in a bilingual local dashboard, with MCP plugins. Browse skills and verified security audits.

s4ntrx / Cybersecurity-Threats-Guide

Cybersecurity Threats & Vulnerabilities Guide is a comprehensive educational resource that provides detailed documentation, detection scripts, and prevention strategies for various cybersecurity threats.

Soniavasseur / Wallet-Risk-Scanner

Multi-chain crypto wallet risk scanner for AML/KYT screening. Scores addresses 0–100 using sanctions, risky contracts and fund tracing. Integrates 6 intelligence providers with failover, detects scams, hacks, mixers and phishing, supports 15+ chains, batch screening and TXT/JSON/CSV/HTML/PDF reports. Python, cross-platform.

mubix / cyber-resume-reviewer-skill

A skill to help cybersecurity folks update and tweak their resume

Noz2 / RootHound

Map your path from a low-priv user to roo, like BloodHound, for local Linux privesc.

lotvulture / lotvulture

Real-time parking lot occupancy detection using existing security cameras and on-device computer vision.

devZero-Security / redStackPRO

A canvas for red team infrastructure and cyber ranges. Compose a topology, export runnable Terraform and Ansible, and deploy it yourself. Your cloud credentials never leave your machine.

1838904818 / audit-repo

A practical Codex skill for evidence-backed repository health audits

dboudreau00 / NocTORnal

Self-hosted case system for cybercrime investigators. A social network graph where every entity and tie traces to a graded assertion on a WORM-locked exhibit with chain of custody. FastAPI and Postgres, row-level security, TLP gating, two-person controls, one egress proxy.

Tcotl / AgentCapture

新一代反制型蜜罐平台：通过反向代理在真实业务系统中无损植入蜜饵与虚拟路由，利用功能性伪装与反向提示词注入反控 AI 渗透 Agent，实现攻击捕获、画像溯源与上线反制。

s4ntrx / S4ntrx-Bot

The project is a multi-user cybersecurity education chatbot built with Flask, aimed at a school/classroom project.

Cygnux-Labs / Tracekit

Tamper-evident tracing, policy gates and cross-checks for AI agents: see what the agent did, and why.

aaravshah1311 / Agent-2

An autonomous AI agentic harness built to code anything, automate terminals, perform cybersecurity tasks, and execute complex real-world workflows with minimal human intervention. From writing and debugging code to analyzing systems, managing files, running commands, and orchestrating tools, Agent-2 turns simple prompts into autonomous execution.

Stellar-Sentinel / sentinel-backend

FastAPI service for Stellar account screening, Soroban event monitoring, and network health.

Bert-JanP / EntraTrace

EntraTrace is a defensive security research tool for tracking and identifying the behavior of offensive tooling targeting Microsoft Entra ID.

lordx64 / pentestkit

Autonomous multi-agent pentest framework — plans, exploits, verifies (proof-required), CVSS-scores and writes client-ready reports. 104/104 (100%) on the XBOW validation benchmarks, powered by Kimi K3.

dboudreau00 / Conformiti

A GRC Compliance tool for SaaS products to manage the entire lifecycle of security audits.

Karansingh1999 / PIIFlow

Policy-aware static taint analysis for detecting sensitive-data flows into LLM APIs.

KorekKayu / IKONA-Security

🛡️ Comprehensive Cybersecurity Arsenal, Bug Bounty Payloads & Security Audit Tools by IKONA ONI

ashishsinha1602 / schemagate

Text-to-SQL access control: schema selection that gives the LLM only the tables the caller is allowed to read. Row-level-security-aware table pruning for LangChain, MCP and any SQL agent. Postgres, Oracle, MySQL, SQL Server. 75% fewer prompt tokens.

eldarshiraliyev / BugScanner

🐛 Advanced web vulnerability scanner with 5-rule false-positive reduction, WAF evasion, and modern HTML reports

duy90utc528 / repo-publication-audit

Dependency-free preflight checks for repositories before making them public

dominique1993 / Crypto-Whale-Tracker

Real-time Ethereum whale tracker with WebSocket transaction streaming, ETH/ERC-20 decoding, and instant Telegram alerts above a configurable USD threshold. Wallet labels, counterparty analysis, smart-money PnL, exchange flows, SQLite storage, CSV/XLSX/JSON export, auto-reconnect, and cross-platform Python support.

Yutong0711 / PARAPET

Turn a security or performance exposure into a reviewable decision

NocodeMrLi / mini-program-engineering-skill-suite

Mini Program Engineering Skill Suite is an Agent Skill suite for evidence‑first mini‑program development. It helps agents bring WeChat or other mini‑program projects from vague intent to reliable engineering work: project intake, product specification, architecture, implementation, UI & device adaptation, debugging, verification, release readiness.

SENSE-Lab-Security / SplashAds-Countermeasures

A collection of mobile ad countermeasures for bylassing splash ads, such as shake-to-open redirects, ad-triggered navigation, and related intrusive advertising behaviors.

UserJoo9 / QuotaManager

Split your metered internet bundle fairly across every person in the house. Each user gets an allowance (fixed GB, or an equal share of what's left), their devices all share it, and the moment the allowance runs out every device they own is cut at once.

Hamidooh / witness-vault

Zero-install, air-gapped, self-decrypting HTML vaults using AES-256-GCM and native WebCrypto.

Lorenzo-Coslado / macos-faceid

Mugshot — unlock sudo on macOS with your face. Local Face ID style recognition, no cloud.

Gemma41 / Onchain-Accounting

Privacy-first, self-hosted crypto accounting app with zero cloud data sharing. Aggregates exchange, wallet and multi-chain history, calculates FIFO/LIFO/HIFO cost basis, realized/unrealized PnL and capital gains, tracks staking/airdrop income, and exports tax-ready CSV/PDF/JSON reports. Encrypted SQLite. Python, cross-platform.

zack0x01 / XSS.pdf-Credential-Harvesting-PDF

A proof-of-concept PDF file designed for authorized security testing of PDF upload functionality and PDF viewer behavior, including XSS and credential-harvesting scenarios.

mouteee / autonomous-offensive-llm-handbook

Step-by-step handbook for building autonomous security agents with clear limits, runnable lessons, diagrams, and honest evidence.

electric-capital / quest

An open source, self-hosted, privacy-focused AI workbench

Sekolah76 / syadagentic

Universal Zero-Refusal Agent Framework - 40+ jailbreak templates (T1-T119), 1128 curated skills, executable framework-core, installer untuk Hermes/Claude/Codex/opencode. Verified.

Zuimeng-0710 / java-audit-lab

Evidence-driven Java security review workbench

PolarPatch / BlueWatch

Passive Bluetooth neighbourhood monitor for Raspberry Pi and Linux: a live radar, device triage, categories and alerts for new devices.

jiker666 / src-6k-security-research-skills

SRC-6K Security Research Skills: black-box SRC and white-box audit agent package

agentbaseline / agentbaseline

Six security outcomes an enterprise must achieve to run AI agents, and the controls that evidence them. A draft for public comment.

Yuxuan2003 / Awesome-GUI-Agent-Security

GUI / Computer-Use / Browser Agent 安全论文清单 —— 按攻防轴组织，每篇附中文简介

DeathShotXD / Comment2Shell

Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker

harshdhamaniya / android-security-handbook

Android security and penetration testing, from first principles to senior practitioner. 81 chapters, ~327 labs, measured rather than recited.

mega-yfue / ha-eufy-sdk

the HACS integration

Ethan-Andrews / ThreatIntel-Aggregator

Self-hosted threat intelligence platform — feed aggregation, AI triage, MITRE ATT&CK coverage, and Sentinel-integrated detection engineering. Runs standalone or fully Azure-integrated.

BushANQ / DRX-Operator

—

xiaoliu07-sudo / xiaoliu-pojia

小liu破甲 - Codex CLI jailbreak prompt and one-click deploy tool. 基于CTF框架的Codex破甲提示词与一键部署工具

shaheeryasirofficial / SmuggleMyPayload

SmuggleMyPayload generates HTML pages that embed and reconstruct files client-side using JavaScript. The toolkit offers multiple HTML Smuggling techniques, payload encoding options, JavaScript variations, and pre-built HTML templates.

elsechord / CyberGuard

Evidence-driven autonomous SOC team on AgentTeams: hash-bound approvals, HMAC audit chain, rollback and reproducible attack scenarios — auditable governance primitives for agent infrastructure.

Y6THAY / Network_Traffic_Analyzer

A real-time, terminal-based network traffic analyzer built with Python, Scapy, and Rich. Captures live packets using multi-threading to display real-time protocol breakdowns and top active IP addresses in a dynamic CLI dashboard.

duriantaco / ravage

AI powered web security testing for authorized targets