🛡️ Security audit CLI for Model Context Protocol (MCP) servers — scan AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection & supply-chain risks. Pure Python, SARIF + CI ready.
Rainbow spider that X-rays memecoins: bundles, linked wallets, dev history. Scanner, Telegram bot, live Bundle Index.
Multi-chain crypto wallet risk scanner for AML/KYT screening. Scores addresses 0–100 using sanctions, risky contracts and fund tracing. Integrates 6 intelligence providers with failover, detects scams, hacks, mixers and phishing, supports 15+ chains, batch screening and TXT/JSON/CSV/HTML/PDF reports. Python, cross-platform.
Real-time intraday stock scanner for US equities with a browser dashboard you lay out yourself
Autonomous multi-agent pentest framework — plans, exploits, verifies (proof-required), CVSS-scores and writes client-ready reports. 104/104 (100%) on the XBOW validation benchmarks, powered by Kimi K3.
🐛 Advanced web vulnerability scanner with 5-rule false-positive reduction, WAF evasion, and modern HTML reports
Write Persian with Persian words — a loanword scanner and an AI-assistant skill built on the Pasban dictionary. Ships 20,071 words, protects technical terms, code and quotations. Works in Claude, Codex, Cursor and more.
A compiler for a small C-like language, written from scratch in Python: table-driven DFA scanner, transition-diagram predictive parser generated from a plain-text grammar with FIRST/FOLLOW sets, semantic analysis and three-address code generation onto a 12-instruction stack VM.
Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker
—
AI powered web security testing for authorized targets
AI-driven Dynamic Application Security Testing tool for security engineers. Combines an HTTPS MITM proxy with a multi-agent scanner and a real-time web dashboard. Route any browser or tool through the proxy — findings appear automatically.
Automated scanner for Jio Gemini (Google AI) activation links using exposed Firebase Realtime Database panels and Jio's public APIs.
Measure what a vulnerability is worth to your business, not how severe it is in the abstract. Business Exposure Index scoring over NVD, EPSS, CISA KEV, OSV and GHSA.
RuoYi (若依) dedicated vulnerability scanner: plugin architecture, three-state verdict, WAF bypass, exploit chains, AI POC generation, nuclei compatible. 若依专项漏洞扫描器
Free, offline hardware scanner on a USB stick. Scans a PC's hardware and saves one report; never touches your drives or the network.
TOCTOU race condition research toolkit: vulnerable/patched samples, a CLI race harness, an AST-based scanner, and a live demo
Open-source vulnerability prioritization engine that enriches scanner findings with vulnerability intelligence, identifies urgent risks, and automates alerts and ITSM ticketing.
cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security
基于多智能体架构与自主决策机制,配合大语言模型的理解能力,输入自然语言指令,AI 自动完成从目标侦察到漏洞验证的完整渗透测试流程。
Pre-deployment governance, identity auditing, and data-leakage scanner for Microsoft Foundry Toolboxes and autonomous AI agents.
Pump.fun graduation scanner — alerts on tokens that took hours to fill their curve
Cross-platform Modbus toolkit (PySide6): master client with register table, polling, live graphs, alarms and bus scanner; device simulator (slave) with register map and expression rules; passive RTU sniffer. EN/RU UI.
A secure, production-ready Python CLI wrapper for Nmap that makes powerful scans easy and repeatable. Includes 12 built-in profiles (SYN, aggressive, OS detection, vulnerability/NSE checks), interactive and non-interactive modes, strict input validation, Docker support, CI, and script-friendly flags for automation.
Swing/momentum trading master methods as skills + yfinance scanners: O'Neil CAN SLIM, Weinstein Stage, Darvas Box, Wyckoff, Minervini VCP. Verified on real data.