affaan-m / ECC

Agent harness system of skills, agents, hooks, rules, memory, and security scanning for Claude Code, Codex, Cursor, and other AI coding tools.

shaobeichen / dsh-pocket

把 DeepSeek Harness 装进你的口袋：电脑上跑 dsh web，手机扫码即同步访问（局域网 + 公网，实时同屏）Put DeepSeek Harness in your pocket: run dsh web on your computer and access it synchronously by scanning a QR code on your phone (LAN + public network, real‑time screen mirroring)

gichirimaku / wp2shell-PoC

CVE-2026-63030 + CVE-2026-60137 exploit RCE chain.

promptfoo / promptfoo

Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.

Autumn-27 / ScopeSentry

Distributed security asset discovery platform covering subdomain enumeration, port scanning, vulnerability scanning, and page monitoring.

ZeroDayEvil / CVE-2026-75604-PoC

🛡 Official AI Security Tool module for CVE-2026-75604 (Next.js Windows Unauthenticated Remote Code Execution) with safe in-app execution, deep vulnerability validation, and DevSecOps-ready security auditing workflows.

VirtualPurser / Far-Cry-3-Value-Forge-resocket

Far Cry 3 Ultimate Trainer & Memory Editor 2026 Toolkit

trufflesecurity / trufflehog

Scans repositories, filesystems, and chats for leaked credentials, then verifies whether each one is still live.

openai / codex-security

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

MaxHu-xuan / chat-archive-guard

Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.

six2dez / reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

shadow1ng / fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)

pipelab-org / pipelock

Open-source AI agent firewall for MCP security and agent egress. Scans mediated HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injection, and emits mediator-signed action receipts: verifiable audit evidence from outside the agent.

PatchMon / PatchMon

Linux Patch Management & Automation Platform

zxing / zxing

ZXing ("Zebra Crossing") barcode scanning library for Java, Android

ossappscollective / OSS-DocumentScanner

Document scanning app

introlab / rtabmap

RTAB-Map library and standalone application

betterleaks / betterleaks

Find leaked secrets everywhere.

marcinz606 / NegPy

Tool for processing film negatives.

github / codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

nabla-c0d3 / sslyze

Fast and powerful SSL/TLS scanning library.

ad-si / awesome-3d-printing

A curated list of awesome 3D printing resources

artifact-keeper / artifact-keeper

Open-source universal artifact registry. Drop-in Artifactory/Nexus alternative with 40+ package formats, security scanning, WASM plugins, and edge replication.

robertdavidgraham / masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

bee-san / RustScan

🤖 The Modern Port Scanner 🤖

kubescape / kubescape

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

qltysh / qlty

💎 Code quality CLI for universal linting, auto-formatting, security scanning, and maintainability

github / codeql-action

Actions for running CodeQL analysis

pass-with-high-score / universal-installer

A modern Android app for installing and managing APK packages with split APK support, silent install via Shizuku, and VirusTotal malware scanning.

dwisiswant0 / crlfuzz

A fast tool to scan CRLF vulnerability written in Go

six2dez / burp-ai-agent

Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more

projectdiscovery / urlfinder

A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.

openqodex / openqodex

Open source code review that runs in your coding agent before you push. Scanners plus a separate AI reviewer, on your own login, no key.

gitleaks / gitleaks-action

Protect your secrets using Gitleaks-Action

shinthink / blitzstrike

Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before report.

newdee / magpie

Spotlight-style local search for everything you saved and forgot: GitHub stars, local files, images, and bookmarks. Privacy-first, no full-disk scanning, fully on-device.

morluto / smokinggun

Help your agents find the smoking gun they're looking for. Optimization evidence for agents: find complexity hotspots.

claudiodangelis / qrcp

:zap: Transfer files over wifi from your computer to your mobile device by scanning a QR code without leaving the terminal.

yogeshojha / rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

infobyte / faraday

Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.

zmap / zmap

ZMap is a fast single packet network scanner designed for Internet-wide network surveys.

zan8in / afrog

A Security Tool for Bug Bounty, Pentest and Red Teaming.

alexandreborges / malwoverview

Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.

leebaird / discover

Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Ubuntu. Limited support for Kali Linux.

Bearer / bearer

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

cve-search / cve-search

cve-search - a tool to perform local searches for known vulnerabilities

aboutcode-org / scancode-toolkit

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

LoRexxar / Kunlun-M

KunLun-M — Open-source static code analysis for PHP, Nodejs/JavaScript, Python, Golang, Java and C/C++, with AST-based semantic scanning and one-click AI Agent integration (OpenClaw, Codex, Claude Code, Hermes, and more).

kkrypt0nn / wordlists

📜 Yet another collection of wordlists

jorhelp / Ingram

网络摄像头漏洞扫描工具 | Webcam vulnerability scanning tool

zmap / zgrab2

Fast Application Layer Scanner

GitGuardian / ggshield

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.

scanmem / scanmem

memory scanner for Linux

laminas / laminas-code

Extensions to the PHP Reflection API, static code scanning, and code generation

OpenSCAP / openscap

NIST Certified SCAP 1.2 toolkit

composer-unused / composer-unused

Show unused composer dependencies by scanning your code

fossas / fossa-cli

Fast, portable and reliable dependency analysis for any codebase. Supports license & vulnerability scanning for large monoliths. Language-agnostic; integrates with 20+ build systems.

GrapheneOS / Camera

Modern camera app focused on privacy and security with QR & barcode scanning.

topscoder / nuclei-wordfence-cve

80k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒

mongodb / kingfisher

Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.