vxcontrol / pentagi

Self-hosted multi-agent system that autonomously plans and runs penetration tests using tools like nmap, Metasploit and sqlmap in Docker.

zhaoxuya520 / reverse-skill

A routing pack that tells AI coding agents which reverse-engineering or pentest methodology and tools to use for APKs, binaries, JS crypto, PCAPs, and CTFs.

usestrix / strix

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

Sonarr / Sonarr

Monitors RSS feeds for TV episodes from Usenet and BitTorrent sources, then grabs, sorts, and renames them.

jiwoochris / artex-global

ARTEX 한국어판 · AI 자율 침투 테스트 프레임워크(upstream: Autumn-27/ARTEX, AGPL-3.0)

trhhubsd / ARTEX

ARTEX · AI autonomous penetration testing system (multi-agent LLM, Go + Next.js) · AI 自主渗透测试系统 · 百度 agent+ 攻防挑战赛冠军

rawfilejson / awesome-osint-arsenal

Curated list and one-command installer for 750+ open-source intelligence and security tools across 50 categories.

opentrap / opentrap

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

Armur-Ai / Pentest-Swarm-AI

Autonomous API and web-app penetration testing tool that runs a swarm of AI agents to chain exploits and prove vulnerabilities.

zero-lab-ai / skills

Portable, evidence-bound security skills for authorized defensive assessment, red teaming, penetration testing, detection engineering, and engagement operations.

KeygraphHQ / shannon

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

mitmproxy / mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

mdpsec / bug-bounty-hunting-prompts

Reusable prompts for a structured, evidence-first bug bounty hunting workflow

AIPentest / CyberStrikeAI

The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.

ZeroDayEvil / CVE-2026-75604-PoC

🛡 Official AI Security Tool module for CVE-2026-75604 (Next.js Windows Unauthenticated Remote Code Execution) with safe in-app execution, deep vulnerability validation, and DevSecOps-ready security auditing workflows.

astroautomata / PySR

Symbolic Learning in Python and Julia

edoardottt / awesome-hacker-search-engines

A curated Markdown list of search engines for security work, covering servers, vulnerabilities, exploits, leaks, and threat intelligence.

OWASP / wstg

A community-written guide covering methods and test cases for security testing web applications and web services.

BitterSecurity / Decepticon

Autonomous Hacking Agent for Red Team

FlowPackerPulse / meanp-rpocket-remap

Modern C++23 Runtime Patching Framework for 2026 Windows Memory Analysis

vybenetwork / solana-mcp-vybe

Public Solana MCP registry metadata for Vybe Solana API

six2dez / reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

The-Art-of-Hacking / h4cker

This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org

kamalx06 / TornadoC2

Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go binary agent with every property baked in at build time. Multi-operator team server with RBAC, audit chain, and a Qt/CLI console. Linux + Windows, amd64 + arm64.

XTLS / Xray-core

Xray-core is a Go network proxy platform implementing VLESS, VMess, Trojan, Shadowsocks and the REALITY transport.

Datalux / Osintgram

Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname

Netw0rkNoob / VulnClaw

基于 AI Agent + MCP 工具链 + 渗透 Skill 编排， 配合大语言模型， 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。

Viren070 / AIOStreams

AIOStreams consolidates multiple Stremio addons and debrid/usenet services - including its own suite of built-in addons and a native Usenet streaming engine - into a single, highly customisable super-addon.

KatrielMoses / MailAccess

Free email OSINT tool, 5000+ platforms, identity clustering, breach detection. No API keys required. pip install mailaccess

JoasASantos / NeuroSploit

NeuroSploit is an advanced, AI-powered penetration testing framework designed to automate and augment various aspects of offensive security operations.

Prowlarr / Prowlarr

Prowlarr is an indexer manager/proxy built on the popular *arr .net/reactjs base stack to integrate with your various PVR apps, supporting management of both Torrent Trackers and Usenet Indexers.

pichenettes / eurorack

Eurorack modules

CyberStrikeus / CyberStrike

Open-source AI-powered offensive security harness for automated penetration testing.

1038lab / ComfyUI-RMBG

A ComfyUI custom node designed for advanced image background removal and object, face, clothes, and fashion segmentation, utilizing multiple models including RMBG-2.0, VRMBG-3.0, FeyNoBg, Finegrain Box Segmenter, INSPYRENET, BEN, BEN2, BiRefNet, Lucida, SDMatte, SAM, SAM2, SAM3, Florence-2, YOLOv8/YOLO11, Big-Lama, and GroundingDINO.

ASCIT31 / Dark-Moon

Open-source autonomous AI penetration testing. 50 specialist agents across web, API, cloud, Active Directory, Kubernetes, CI/CD and AI/LLM (OWASP LLM Top 10). Runs on a local LLM behind a Privacy Gateway. Integrates with GitHub, GitLab, Jenkins, VS Code, JetBrains, n8n, Grafana & Splunk.

h5i-dev / h5i

An Axum-based Rust web framework for building and verifying web apps with Lean 4, featuring optional GPU acceleration and integrated development infrastructure for red-teaming and CI/CD.

Optima-CityU / LLM4AD_Next

A next-generation automatic algorithm design platform, making automated algorithm design more accessible and easier to use

Sportarr / Sportarr

Sportarr - Sports PVR for usenet and torrents. Like Sonarr & Radarr but for sports events.

kutukam / autonomous-pentest-agent

Autonomous Pentest Agent — LLM multi-agent autonomous penetration testing system (Go backend + Next.js UI). AGPL-3.0.

BaaRai / ARTEX

ARTEX - AI autonomous penetration testing system (English translation)

huggingface / pytorch-image-models

The largest collection of PyTorch image encoders / backbones. Including train, eval, inference, export scripts, and pretrained weights -- ResNet, ResNeXT, EfficientNet, NFNet, Vision Transformer (ViT), MobileNetV4, MobileNet-V3 & V2, RegNet, DPN, CSPNet, Swin Transformer, MaxViT, CoAtNet, ConvNeXt, and more

maurosoria / dirsearch

Web path scanner

Radarr / Radarr

Movie organizer/manager for usenet and torrent users.

qubvel-org / segmentation_models.pytorch

Semantic segmentation models with 500+ pretrained convolutional and transformer-based backbones.

AzeemIdrisi / PhoneSploit-Pro

An all-in-one hacking tool to remotely take over Android devices.

awarexone / Agentic-Bug-Hunter

AI-powered bug bounty hunting toolkit that works with or without subscription.

samugit83 / redamon

Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent.

ThePorgs / Exegol

Fully featured and community-driven hacking environment

wenet-e2e / wespeaker

Research and Production Oriented Speaker Verification, Recognition and Diarization Toolkit

thetahealth / mirobody

Turn scattered health data into answers you can trace. Self-hosted AI health data engine for lab reports, wearables and genetics, with a built-in MCP server. Run it with Docker and one LLM key, or keep every model local on llama.cpp.

pyamsoft / tetherfusenet

TetherFuseNet - Internet sharing without Root

s0ld13rr / pentestcode

PentestCode - Multi-agent AI penetration testing system with persistent engagement state, strategic coordination, and parallel autonomous operations.

cheneternity / Zotero-Analytical-Workflow-Skills

主要是用于zotero论文导入obsidian的转换和管理，包括论文精读和精读模板

rdborg / Mediarium

Self-hosted media manager for movies, TV, music, ebooks and audiobooks: search, download and organise, all in one Docker container.

Mr-Destroyer / ZimZilla

THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING

Jueze-2019 / dsh-redteam-mode

DSH RedTeam 模式：把 DeepSeek Harness 变成红队作战指挥台——一个靶标名称拉起信息收集/漏洞检测/漏洞利用/内网渗透四个角色，资产与战果实时落入本地 SQLite 事实库（仅供已授权测试）

fb0sh / dsh-pentester

基于 DeepSeek Harness 的多 Agent PTES 渗透测试编排插件，支持自动化侦察、漏洞分析、验证与报告，使用 Docker/Kali 隔离工具箱 | Multi-agent PTES penetration testing plugin for DeepSeek Harness with automated recon, vulnerability analysis, validation, reporting, and Docker/Kali toolbox

serengil / deepface

A Lightweight Face Recognition and Facial Attribute Analysis (Age, Gender, Emotion and Race) Library for Python

We5ter / Scanners-Box

The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵

trickest / cve

Gather and update all available and newest CVEs with their PoC.