ZigZagBoi1 / PS5-14.10-Research
Open PS5 firmware 14.10 research: Lua userland experiments, syscall and attack-surface analysis. Kernel read/write and a complete exploit are not demonstrated.
ZigZagBoi1 / PS5-14.10-Research
CyberDefenderAI / AI-Data-Security-Governance
In the era of Generative AI, the data is the primary attack surface. This module focuses on securing the ML data pipeline from ingestion to vector storage, ensuring that the foundation of the AI model remains uncompromised and privacy-compliant.
VirtualPurser / Far-Cry-3-Value-Forge-resocket
Far Cry 3 Ultimate Trainer & Memory Editor 2026 Toolkit
CyberDefenderAI / Attack-Evidence-Compensating-Controls
A highly technical forensic and architectural guide. This module details exactly how AI-specific attacks manifest in system telemetry, followed by the rigorous, defense-in-depth security controls required to neutralize them.
kamalx06 / TornadoC2
Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go binary agent with every property baked in at build time. Multi-operator team server with RBAC, audit chain, and a Qt/CLI console. Linux + Windows, amd64 + arm64.
Z4nzu / hackingtool
ALL IN ONE Hacking Tool For Hackers
KeygraphHQ / shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
projectdiscovery / nuclei
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
chaitin / SafeLine
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
fail2ban / fail2ban
Daemon to ban hosts that cause multiple authentication errors
cure53 / DOMPurify
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
MatrixTM / MHDDoS
Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods
redcanaryco / atomic-red-team
Small and highly portable detection tests based on MITRE's ATT&CK.
BishopFox / sliver
Adversary Emulation Framework
kubescape / kubescape
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
blacklanternsecurity / bbot
The recursive internet scanner for hackers. π§‘
owasp-modsecurity / ModSecurity
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.
ai-boost / awesome-prompts
Curated list of chatgpt prompts from the top-rated GPTs in the GPTs Store. Prompt Engineering, prompt attack & prompt protect. Advanced Prompt Engineering papers.
stamparm / maltrail
Malicious traffic detection system
ufrisk / pcileech
Direct Memory Access (DMA) Attack Software
SnailSploit / Claude-Red
claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface β from SQLi to shellcode, EDR evasion to exploit development.
apache / caldera
Automated Adversary Emulation Platform
RsaCtfTool / RsaCtfTool
RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data
j3ssie / osmedeus
A Modern Orchestration Engine for Security
cowrie / cowrie
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
cloudquery / cloudquery
Data pipelines for cloud config and security data. Build cloud asset inventory, CSPM, FinOps, and vulnerability management solutions. Extract from AWS, Azure, GCP, and 70+ cloud and SaaS sources.
projectdiscovery / naabu
A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests
Trusted-AI / adversarial-robustness-toolbox
Adversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red and Blue Teams
elementalsouls / Claude-BugHunter
A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.
makcedward / nlpaug
Data augmentation for NLP
cifertech / ESP32-DIV
ESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32
ivre / ivre
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
trustedsec / unicorn
Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
firehol / blocklist-ipsets
ipsets dynamically updated with firehol's update-ipsets.sh script
gadievron / raptor
Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we configure the agent for adversarial thinking, and perform research or attack/defense operations.
WithSecureOpenSource / chainsaw
Rapidly Search and Hunt through Windows Forensic Artefacts
Yamato-Security / hayabusa
Hayabusa (ιΌ) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
samugit83 / redamon
Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent.
olafhartong / sysmon-modular
A repository of sysmon configuration modules
C2SP / wycheproof
Project Wycheproof tests crypto libraries against known attacks.
projectdiscovery / uncover
Quickly discover exposed hosts on the internet using multiple search engines.
microsoft / AttackSurfaceAnalyzer
Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation.
elementalsouls / Claude-OSINT
8 Claude skills Β· 100+ recon capabilities Β· 80 secret-regex patterns Β· 80+ dorks Β· 9 read-only credential validators Β· 27 attack-path templates Β· ~10,000 lines of structured tradecraft. Drop-in SKILL.md files that turn Claude into a god-mode external recon operator for authorized red-team and bug-bounty engagements.
sheeki03 / tirith
Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and malicious AI skills/configs before they execute.
Cloud-Architekt / AzureAD-Attack-Defense
This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.
splunk / attack_range
A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk
rabbitstack / fibratus
Security sensor for realtime threat detection and protection
x90skysn3k / brutespray
Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.
mitre-attack / attack-navigator
Web app that provides basic navigation and annotation of ATT&CK matrices
Shuffle / Shuffle
Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.
DataDog / stratus-red-team
:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
beenuar / AiSOC
Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.
0xSteph / pentest-ai-agents
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
googleprojectzero / sandbox-attacksurface-analysis-tools
Set of tools to analyze Windows sandboxes for exposed attack surface.
kimci86 / bkcrack
Crack legacy zip encryption with Biham and Kocher's known plaintext attack.
lkarlslund / Adalanche
Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?
mitre / cti
Cyber Threat Intelligence Repository expressed in STIX 2.0
Ragnt / AngryOxide
802.11 Attack Tool
nymtech / nym
Nym provides strong network-level privacy against sophisticated end-to-end attackers, and anonymous transactions using blinded, re-randomizable, decentralized credentials.
cyb3rxp / awesome-soc
A curated knowledge base to build, run and mature a SOC (including CSIRT).