ifixai-ai / iFixAi
Independent Auditing of AI Agents. Run by human or the agent itself, to answer the most crucial question in the AI Agent Economy. Is the agent doing what is supposed to do? With iFixAi you can have this answer in less than 120 seconds.
interplains / zero-breach
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
escudero / brandpose
Personal project: where shoppers look, estimated from an ordinary security camera and open source AI (YOLO11, Gaze-LLE, Depth Anything V2)
Gen-Verse / DiscoveryRSI
DiscoveryRSI: Recursively Learning to Discover Valuable Hypotheses
ajogalekar / claude-codex-loop
Autonomous Claude Code execution with hourly Codex review, reconciliation, and bounded follow-up prompts.
chaenmasahiro0425 / claude-security-scan
「セキュリティチェックして」の一言で、Mac・リポジトリ・GitHub・Vercel・AWS・Gmailを読み取り専用で横断点検する Claude Code スキル
BijectiveLabs / trading-research-agents
Autonomous trading agents with deterministic execution. The agents propose; the system decides.
irraz / vulnerator-ai
Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.
biologyscience / ps5-exe-toolkit
A simple GUI wrapper to automate the conversion of extracted PS5 pkg files to a native windows executable using Relinker from AnyPS5
kamalx06 / TornadoC2
Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go binary agent with every property baked in at build time. Multi-operator team server with RBAC, audit chain, and a Qt/CLI console. Linux + Windows, amd64 + arm64.
mbzuai-nlp / ChemLab-Assets
simulation-ready chemistry lab instruments: part-level geometry, joints, executable behaviour models and machine-readable contracts
eagle-hq / EAGLE-4
Official Inference Code of EAGLE-4
threathunterX / underground-slang-lexicon
A continuously updated lexicon of underground slang in the online fraud and gray-market economy: definitions, supply-chain roles, sanitized real-world usage and false-positive warnings. Chinese-dominant, with Brazilian Portuguese, English, Indonesian, Tagalog and Vietnamese entries. Maintained by the Threat Hunter research team.
LARK-AI-Lab / SpecAgent
Code for Trajectory-Level Speculation with Semantic Verification for Tool-Using Agents
sherlock-project / sherlock
Hunt down social media accounts by username across social networks
usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
mitmproxy / mitmproxy
An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
soxoj / maigret
🕵️♂️ Collect a dossier on a person by username from 6K websites
sqlmapproject / sqlmap
Automatic SQL injection and database takeover tool
jumpserver / jumpserver
JumpServer is an Open-source Privileged Access Management (PAM) platform with AI-powered capabilities, providing DevOps and IT teams a unified workspace to securely access SSH, RDP, Kubernetes, databases, websites, RemoteApp, VirtualApp, and more.
StevenBlack / hosts
🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.
trailofbits / algo
Set up a personal VPN in the cloud
goauthentik / authentik
The authentication glue you need.
marimo-team / marimo
A reactive notebook for Python — run reproducible experiments, query with SQL, execute as a script, deploy as an app, and version with git. Stored as pure Python. All in a modern, AI-native editor.
NVIDIA / SkillSpector
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
SWE-agent / SWE-agent
SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024]
eosphoros-ai / DB-GPT
open-source agentic AI data assistant for the next generation of AI + Data products.
fail2ban / fail2ban
Daemon to ban hosts that cause multiple authentication errors
MemoriLabs / Memori
Memori is agent-native memory infrastructure. A LLM-agnostic layer that turns agent execution and conversation into structured, persistent state for production systems. Built for enterprise, Memori works with the data infrastructure you already run, no rip-and-replace, and deploys across managed cloud, single-tenant cloud, VPC, and on-premises.
opensandbox-group / OpenSandbox
Secure, Fast, and Extensible Sandbox runtime for AI agents.
saltstack / salt
Software to automate the management and configuration of infrastructure and applications at scale.
mvt-project / mvt
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
Nuitka / Nuitka
Nuitka is a Python compiler written in Python. It's fully compatible with Python 2.6, 2.7, 3.4-3.14. You feed it your Python app, it does a lot of clever things, and spits out an executable or extension module.
prowler-cloud / prowler
Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.
maurosoria / dirsearch
Web path scanner
NVIDIA / TensorRT-LLM
TensorRT LLM provides users with an easy-to-use Python API to define Large Language Models (LLMs) and supports state-of-the-art optimizations to perform inference efficiently on NVIDIA GPUs. TensorRT LLM also contains components to create Python and C++ runtimes that orchestrate the inference execution in a performant way.
e2b-dev / E2B
Open-source, secure environment with real-world tools for enterprise-grade agents.
cookiecutter / cookiecutter-django
Cookiecutter Django is a framework for jumpstarting production-ready Django projects quickly.
OWASP / mastg
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
pyinstaller / pyinstaller
Freeze (package) Python programs into stand-alone executables
secdev / scapy
Scapy: the Python-based interactive packet manipulation program & library.
kangarooking / cangjie-skill
把书、长视频、播客等高价值内容蒸馏成可执行的 Agent Skills（Distill high-value content from books, long-form videos, podcasts, and more into executable Agent Skills）
SigmaHQ / sigma
Main Sigma Rule Repository
bunkerity / bunkerweb
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
frappe / frappe
Low code web framework for real world applications, in Python and Javascript
blacklanternsecurity / bbot
The recursive internet scanner for hackers. 🧡
drivendataorg / cookiecutter-data-science
A logical, reasonably standardized, but flexible project structure for doing and sharing data science work.
OpenMined / PySyft
Perform data science on data that remains in someone else's server
xonsh / xonsh
🐚 Python-powered shell. Full-featured, cross-platform and AI-friendly.
NVIDIA / garak
the LLM vulnerability scanner
MervinPraison / PraisonAI
PraisonAI 🦞 — Hire a 24/7 AI Workforce. Stop writing boilerplate and start shipping autonomous self-improving agents that research, plan, code, and execute tasks. Deployed in 5 lines of code with built-in memory, RAG, and support for 100+ LLMs.
antoniaci / blackbird
An OSINT tool to search for accounts by username and email in social networks.
bridgecrewio / checkov
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
firerpa / lamda
Android Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MITM, built-in Frida, proxy/VPN/frp/P2P networking, MCP/Agent, 160+ APIs, designed for multi-device clusters and engineered deployments.
stamparm / maltrail
Malicious traffic detection system
PyCQA / bandit
Bandit is a tool designed to find common security issues in Python code.
gaogaotiantian / viztracer
A debugging and profiling tool that can trace and visualize python code execution
trailofbits / skills
Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
SnailSploit / Claude-Red
claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.
apache / caldera
Automated Adversary Emulation Platform