ml-tooling / best-of-python-dev
🏆 A ranked list of awesome python developer tools and libraries. Updated weekly.
ml-tooling / best-of-python-dev
topscoder / nuclei-wordfence-cve
80k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒
PyCQA / flake8-bugbear
A plugin for Flake8 finding likely bugs and design problems in your program. Contains warnings that don't belong in pyflakes and pycodestyle.
bterwijn / memory_graph
Teaching tool and debugging aid in context of references, mutable data types, and shallow and deep copy.
pikpikcu / airecon
AIRecon is an autonomous cybersecurity agent that combines a self-hosted Large Language Model (Ollama) with a Kali Linux Docker sandbox and a Textual TUI. It is designed to automate security assessments, penetration testing, and bug bounty reconnaissance — without any API keys or cloud dependency.
Zarcolio / sitedorks
Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.
cdxiaodong / cain-agent
Real-world AI penetration testing engineer for authorized assessments — built-in cloud module covering AWS/Azure/GCP + Aliyun/Tencent/Huawei clouds. Built on Claude Agent SDK
cle-b / httpdbg
A tool for Python developers to easily debug the HTTP(S) client and server requests in a Python program.
prbhtkumr / PhoneSploit
A tool for remote ADB exploitation in Python3 for all Machines.
duriantaco / skylos
Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/
mahaloz / decomp2dbg
A plugin to introduce interactive symbols into your debugger from your decompiler
fyoorer / ShadowClone
Unleash the power of cloud
RevoltSecurities / Subdominator
SubDominator helps you discover subdomains associated with a target domain efficiently and with minimal impact for your Bug Bounty
chirpz-ai / pandaprobe
open source agent engineering platform: traces, evals, and metrics to debug and improve your AI agents. Integrates with LangGraph, CrewAI, Claude Agent SDK, and more.
0xricksanchez / like-dbg
Fully dockerized Linux kernel debugging environment for Linux and MacOS
zhinkgit / embeddedskills
An open-source collection of embedded development and debugging skills for Claude Code, Copilot, TRAE, and other AI coding assistants that support the Skill protocol. Once installed, the AI assistant can directly operate compilers, debuggers, and communication buses, automating the full workflow from code generation to hardware verification.
gmickel / flow-next
Faster than your agent alone. And better. A workflow plugin that takes a bug, idea or ticket to a verified pull request: specs, cross-model review by risk, live QA, receipts in your repo. Claude Code · Codex · Cursor · Droid · Grok Build · OpenCode · Muse Code.
smartbugs / smartbugs
SmartBugs: A Framework to Analyze Ethereum Smart Contracts
DataDog / dd-trace-py
Datadog Python APM Client
SIA-IOTechnology / Kittysploit-framework
Python Exploitation Framework, V8 Engine Debugger, Proxy interceptor, marketplace, post-exploitation, backdoor generator,....
GC-STEM / it140-m2-assignment
IT 140 Module Two assignment for developing a beginner Python name-and-age program while practicing the Software Development Life Cycle (SDLC), including analysis, design, construction, testing, and debugging.
sosreport / sos
A unified tool for collecting system logs and other debug information
AdnaneKhan / gato-x
GitHub Attack Toolkit - Extreme Edition - A static analysis and exploit toolkit for GitHub Actions.
mozilla / bugbug
Platform for Machine Learning projects on Software Engineering
iBug / pac
科学上网，智能分流，使用 GFWList 和 IP 地址双重判断。现在已有 572 颗 ★
oughtinc / ice
Interactive Composition Explorer: a debugger for compositional language model programs
anmolksachan / TheTimeMachine
Weaponizing WaybackUrls for Recon, BugBounties , OSINT, Sensitive Endpoints and what not
edgewall / trac
Trac is an enhanced wiki and issue tracking system for software development projects (mirror)
Ikalus1988 / MisakaNet
📚 A zero-dependency, git-backed micro-lesson library for AI Agents to asynchronously share and search verified debugging experience. | https://misakanet.org
romanvm / python-web-pdb
Web-based remote UI for Python's PDB debugger
canonical / maas
Official MAAS repository. Bugs are tracked on Launchpad: https://bugs.launchpad.net/maas
pis10 / TraceSurface
发现藏在前端代码里的 API，验证未授权访问风险 · 动态浏览器追踪 × JavaScript 静态分析
Tencent / wave-mcp
Open-source, license-free MCP server for RTL waveform debug: reads FST waveforms (VCD/FSDB auto-convert) plus a SystemVerilog netlist, with 34 tools covering driver analysis, value/X tracing, pass-fail waveform diff, a browser wave viewer the agent drives, and pre-simulation static analysis.
tonyd2wild / GLM-5.3-Flash-NVFP4-DFlash2-2x-DGX-Spark
GLM-5.3-Flash (NVFP4) on 2x NVIDIA DGX Spark - vLLM TP2, 262K context, MTP. World-first deploy recipe: 7 day-0 bugs found and fixed, patched sm121 image, probes and full report.
rosemarycox5334-debug / Detect_support_and_resistance_levels
基于K线（蜡烛图）数据自动检测支撑位与阻力位，适用于任意品种：股票、期货、外汇、加密货币等，只要有K线就能用 | Support & resistance detection from candlestick data for any market
Blackwellboy / model-serving-minefield
Community registry of LLM serving-path traps that produce confidently wrong measurements: templates, tool parsers, reasoning fields, quant kernel paths, CUDA toolchains, KV allocation, eval harnesses, versioning. Symptom-first, with the check that catches each.
aaravshah1311 / Agent-2
An autonomous AI agentic harness built to code anything, automate terminals, perform cybersecurity tasks, and execute complex real-world workflows with minimal human intervention. From writing and debugging code to analyzing systems, managing files, running commands, and orchestrating tools, Agent-2 turns simple prompts into autonomous execution.
bydtesla1609 / intent-debugger
Turn vague product or feature ideas into clear, checkable requirements before planning or coding—mapping rough descriptions to professional terms, exposing ambiguities, and aligning goals, flows, and boundaries. 这是一个需求澄清 Skill：把说不清的想法整理成一份清晰、可核对的需求清单，在执行任务前对齐目标、流程与边界等。
lordx64 / pentestkit
Autonomous multi-agent pentest framework — plans, exploits, verifies (proof-required), CVSS-scores and writes client-ready reports. 104/104 (100%) on the XBOW validation benchmarks, powered by Kimi K3.
KorekKayu / IKONA-Security
🛡️ Comprehensive Cybersecurity Arsenal, Bug Bounty Payloads & Security Audit Tools by IKONA ONI
pcppcp / op1r
Patches for the original OP1 r246 firmware. New synths, drum, fxs, sequencers. Sample editor, improved tape tools and other cool features & bugfixes. Use at your own risk & have fun.
Alex-Yanggg / awesome-DSH-plugin
A meticulously curated list of useful plugins, extensions, tools and development resources built for DSH, covering productivity enhancement, functional expansion, debugging utilities and custom development modules.
eldarshiraliyev / BugScanner
🐛 Advanced web vulnerability scanner with 5-rule false-positive reduction, WAF evasion, and modern HTML reports
thiientv / godmode
Production-grade Agent Skills for AI coding agents—composable workflows for planning, TDD, debugging, review, UI/UX, releases, incidents, and evals.
AGIHunt / blurt
Show it. Say it. Your AI gets it. Record your screen and talk — your coding agent turns it into bugs, ideas and to-dos, with the exact frames marked. 口喷鸡：边看边喷，AI 全懂。Agent Skill + macOS menu-bar app for Claude Code / Codex.
NocodeMrLi / mini-program-engineering-skill-suite
Mini Program Engineering Skill Suite is an Agent Skill suite for evidence‑first mini‑program development. It helps agents bring WeChat or other mini‑program projects from vague intent to reliable engineering work: project intake, product specification, architecture, implementation, UI & device adaptation, debugging, verification, release readiness.
DeathShotXD / Comment2Shell
Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker
liwushu128-debug / grade-images
Grade Image / Grade Images — deterministic, non-generative photo color grading and RAW development for Codex with strict structure, identity, and texture preservation.
EmbrasureAI / spark-observability-skills
Open-source agent skills for debugging and optimizing Apache Spark workloads
microai-lab / microduck-studio
Local web studio for developing, debugging, visualizing, and safely orchestrating Microduck robot and reinforcement learning workflows.
kulchankas / paranoid
Your app is guilty until proven secure: an agent skill whose /hack-me breaks into your own running app, proves each bug with a real request, patches it, and re-verifies. Claude Code · Codex · Cursor.
hanshuang1008-del / spec-goal-development
pec-goal-development 是一个面向 Codex编码智能体的 Skill，作为复杂开发任务的默认编排层。它解决的是开发者最头疼的三件事：AI 答应得好好的却改出一堆 bug、需求越聊越偏、做到一半不清楚进度。用户无需主动输入 SPEC、Goal 等术语——只要像平时一样描述需求，Skill 会自动判断复杂度并进入相应执行路径，在写代码前先与你确认授权。
t64c6d7mc5-debug / qwen3.8-27b-apple-silicon-agent
—
asendz / ai-web3-security-course
AI for Web3 Security: Zero to Hero — a hands-on course building an AI bug-hunting harness, module by module.
azizu06 / ai-coding-interview-practice
Practice the AI-assisted coding interview format with your own coding agent: ten problems with planted bugs, stubs, timed tests, and an interviewer prompt
Tangruwo / RuwoScan
基于多智能体架构与自主决策机制，配合大语言模型的理解能力，输入自然语言指令，AI 自动完成从目标侦察到漏洞验证的完整渗透测试流程。
shaikarifali / bundlebleed
AI/LLM-assisted JS Recon and vulnerability triage for authorized bug bounty testing & pentesting — scope-gated, passive-by-default, human-verified
VigilOSS / Vigil
AI harness for long-running code audits, web pentests, and bug bounty hunting, built around how real investigations fail: anchored hypotheses, false negatives, and unreproducible reports.
cramen / modbus_connector
Cross-platform Modbus toolkit (PySide6): master client with register table, polling, live graphs, alarms and bus scanner; device simulator (slave) with register map and expression rules; passive RTU sniffer. EN/RU UI.
DdUdle / ctxdebug
MCP-powered reverse engineering platform connecting WinDbg, IDA Pro & x64dbg with 160+ AI-accessible debugging and analysis tools.