marc-shade / world-intel-mcp
160-tool MCP server for real-time global intelligence from free public APIs: markets, liquidity, prediction markets, SEC filings, conflict, military, aircraft-cohort early warning, migration and border flows, cyber, climate, news and more. Dated observation history, 29 research prompts, cited briefs, geofences, SSE dashboard. MIT, no paid API keys.
Zyrexnn / Cybermes
Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-model LLM orchestration.
FLOCK4H / Freeway
WiFi Penetration Testing & Auditing Tool
dedsec1121fk / DedSec
Official repository of the DedSec Project.
CodeAbra / iai-personal-memory-engine
A cyber brain for your AI. It never forgets a detail, remembers exactly what you said, and learns how you work over time. Free, local, works with Cursor, Claude Code, Codex, OpenClaw, Hermes and more. MIT.
KatrielMoses / voidaccess
Self-hosted dark web OSINT platform. Automated threat intelligence from query to graph in 13 steps. Free alternative to Recorded Future, DarkOwl, and Flare.
BlessedRebuS / Krawl
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
knostic / OpenAnt
OpenAnt from Knostic is the leading open source LLM-based vulnerability discovery and remediation product, helping defenders proactively find and patch verified security flaws while minimizing both false positives and negatives. Stage 1 detects. Stage 2 attacks. What survives is real.
MattKeeley / Spoofy
Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.
chadi0x / TheBigBrother
The Big Brother is a weaponized OSINT platform featuring username enumeration (473+ platforms), quad-vector visual intelligence, Sky Radar tracking, crypto wallet analysis, SSL intelligence, digital footprint reconstruction, EXIF extraction, advanced dorking, and network reconnaissance.
Cyberdrop-DL / cyberdrop-dl
Bulk asynchronous downloader for multiple file hosts
mitre-attack / attack-stix-data
STIX data representing MITRE ATT&CK
stanfrbd / cyberbro
A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.
BullsEye0 / ghost_eye
Ghost Eye Informationgathering Footprinting Scanner and Recon Tool Release. Ghost Eye is an Information Gathering Tool I made in python 3. To run Ghost Eye, it only needs a domain or ip. Ghost Eye can work with any Linux distros if they support Python 3. Author: Jolanda de Koff
7onez / cti-expert
CTI Expert โ Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79 typed MCP tools, deterministic case pipeline + ICD-203 reports. No API keys required for core.
The-Art-of-Hacking / websploit
This is a learning created by Omar Santos (@santosomar) for different Cybersecurity training sessions. It includes many intentionally vulnerable applications running in Docker containers and thousands of cybersecurity resources.
OpenCTI-Platform / connectors
OpenCTI Connectors
vognik / maltego-telegram
๐ OSINT Maltego Transforms for investigating Telegram channels, groups, and users, including deanonymization via stickers, forwarded messages, similar channels, deleted posts, and more.
cyberjunky / home-assistant-garmin_connect
This Garmin Connect integration allows you to expose and upload data from and to Garmin Connect to Home Assistant.
cybersecsi / RAUDI
A repo to automatically generate and keep updated a series of Docker images through GitHub Actions.
CybercentreCanada / assemblyline
Assemblyline 4: File triage and malware analysis
phantomcyber / playbooks
Phantom Community Playbooks
google / mcp-security
โ
GACWR / OpenUBA
A robust, and flexible open source User & Entity Behavior Analytics (UEBA) framework used for Security Analytics. Developed with luv by Data Scientists & Security Analysts from the Cyber Security Industry. [BETA]
CyberAgentAILab / cmaes
Python library for CMA Evolution Strategy.
aixisstudio / Snitch
Real-time network traffic visualizer โ see every connection your computer makes. Privacy-first, 100% local. / Visualiseur de trafic rรฉseau en temps rรฉel, 100% local.
kulkarnirohit123 / cra-agent
Autonomous agentic AI for CRA (Cyber Resilience Act) compliance: scans repos, triages findings, opens Jira tickets, and auto-fixes vulnerabilities via PR.
martian56 / redcell
AI red-team platform. Autonomous LLM agents run a penetration test end to end inside a Kali container and write the report. LangGraph plan/act engine, provider-agnostic models via LiteLLM, PDF/JSON/SARIF output. FastAPI + React.
coll3879xx-cyber / dola-render-gateway
High-performance video generation gateway and session coordinator
s4ntrx / Cybersecurity-Threats-Guide
Cybersecurity Threats & Vulnerabilities Guide is a comprehensive educational resource that provides detailed documentation, detection scripts, and prevention strategies for various cybersecurity threats.
mubix / cyber-resume-reviewer-skill
A skill to help cybersecurity folks update and tweak their resume
devZero-Security / redStackPRO
A canvas for red team infrastructure and cyber ranges. Compose a topology, export runnable Terraform and Ansible, and deploy it yourself. Your cloud credentials never leave your machine.
OSINT-Experts-Society / Consensus-OSINT
๐ Username, email & phone OSINT โ 9,700+ lookup checks from 19 projects, with profile enrichment, bulk searches, evidence graphs and expert-reviewed updates.
dboudreau00 / NocTORnal
Self-hosted case system for cybercrime investigators. A social network graph where every entity and tie traces to a graded assertion on a WORM-locked exhibit with chain of custody. FastAPI and Postgres, row-level security, TLP gating, two-person controls, one egress proxy.
s4ntrx / S4ntrx-Bot
The project is a multi-user cybersecurity education chatbot built with Flask, aimed at a school/classroom project.
aaravshah1311 / Agent-2
An autonomous AI agentic harness built to code anything, automate terminals, perform cybersecurity tasks, and execute complex real-world workflows with minimal human intervention. From writing and debugging code to analyzing systems, managing files, running commands, and orchestrating tools, Agent-2 turns simple prompts into autonomous execution.
lordx64 / pentestkit
Autonomous multi-agent pentest framework โ plans, exploits, verifies (proof-required), CVSS-scores and writes client-ready reports. 104/104 (100%) on the XBOW validation benchmarks, powered by Kimi K3.
KorekKayu / IKONA-Security
๐ก๏ธ Comprehensive Cybersecurity Arsenal, Bug Bounty Payloads & Security Audit Tools by IKONA ONI
wenxuanzhang1209-cyber / jkinco-listen-open
Local-first AI meeting minutes workbench: FunASR speech-to-text + Ollama LLM, engineering-scene recognition, DOCX/PDF export, zero API keys, fully offline. ๆฌๅฐไผๅ ็ๆบ่ฝไผ่ฎฎ็บช่ฆๅทฅไฝๅฐ๏ผๅฝ้ณ่ฝฌๅใๅบๆฏ่ฏๅซใ็บช่ฆๅฏผๅบๅ จๆต็จๆฌๅฐ่ฟ่กใ
eldarshiraliyev / BugScanner
๐ Advanced web vulnerability scanner with 5-rule false-positive reduction, WAF evasion, and modern HTML reports
mouteee / autonomous-offensive-llm-handbook
Step-by-step handbook for building autonomous security agents with clear limits, runnable lessons, diagrams, and honest evidence.
pairomaniac / v-on-patcher
Patcher for Cyber Troopers Virtual-On (PC, 1997). Makes the game run nicely on modern hardware - with online support to boot!
Ouru77 / ev-assistant
๐ธ๏ธ E.V. โ Peter Parker's homemade AI from Spider-Man: Brand New Day, running locally on YOUR PC. Voice assistant + cyber HUD, real PC control, long-term memory. Whisper + Ollama, no cloud. TR/EN.
BushANQ / DRX-Operator
โ
argcyberskillhub / OSINT-X
OSINT-X is a terminal-based Open Source Intelligence and reconnaissance tool.
shaheeryasirofficial / SmuggleMyPayload
SmuggleMyPayload generates HTML pages that embed and reconstruct files client-side using JavaScript. The toolkit offers multiple HTML Smuggling techniques, payload encoding options, JavaScript variations, and pre-built HTML templates.
elsechord / CyberGuard
Evidence-driven autonomous SOC team on AgentTeams: hash-bound approvals, HMAC audit chain, rollback and reproducible attack scenarios โ auditable governance primitives for agent infrastructure.
Y6THAY / Network_Traffic_Analyzer
A real-time, terminal-based network traffic analyzer built with Python, Scapy, and Rich. Captures live packets using multi-threading to display real-time protocol breakdowns and top active IP addresses in a dynamic CLI dashboard.
feng141368-cyber / ClothingMatching-CN
โ
Blackfrost-AI / Cyber-Frost-Harness
Native red, blue, and purple security-agent harness for CYBER-FROST
CharlesMod / infinite-tapedeck
โ TAPEDECK โ infinite personal AI radio. Turn folders of songs into endless local stations: ComfyUI + MiniMax Music 3, taste-modeled from your own library, cyberpunk cassette deck UI.
feng141368-cyber / PlayerVoice-GameAnalysis-CN
Evidence-backed multilingual game research pipeline for players, creators and analysts, with traceable facts, community evidence and structured insights.
P-BitM-Framework / P-BitM
P-BitM is a containerized platform for controlled and weaponized Browser-in-the-Middle
CyberAgentAILab / vae_speech_align
Phoneme alignment based on a variational autoencoder (VAE) and self-supervised learning (SSL) acoustic features.
DevCop95 / shodan_reconsx
Portable passive hostname reconnaissance through Shodan CTL
tricorderproject / cyberdeck
โ
3132882323-cyber / douyin-agent
ๆๅบไธๅทจ้ๅๅท่ฟ่ฅๅฏ้ฉพ
lepczynski-cloud / ESP32-PC-Control-Deck
USB-connected ESP32 PC monitor and touch control deck for system telemetry, ChatGPT, Ollama, local voice services and configurable macros.
icyberdeveloper / tbank-mcp
Unofficial MCP server for T-Bank (ะข-ะะฐะฝะบ, ex-Tinkoff) mobile banking: accounts, cards, transfers, bill pay, grocery ordering, tickets & travel โ for Claude Code and any MCP client.
ErSilh0x / VULNaware
Open-source vulnerability prioritization engine that enriches scanner findings with vulnerability intelligence, identifies urgent risks, and automates alerts and ITSM ticketing.