NationalSecurityAgency / ghidra

Ghidra is an NSA-created software reverse engineering framework with disassembly, decompilation, graphing, and scripting for compiled code.

ifixai-ai / iFixAi

Python CLI and agent plugin that audits whether an AI agent does the job it is supposed to do, using adversarial and operational tests.

vxcontrol / pentagi

Self-hosted multi-agent system that autonomously plans and runs penetration tests using tools like nmap, Metasploit and sqlmap in Docker.

Asymptote-Labs / agent-beacon

Open-source memory layer that captures coding-agent session history across harnesses and turns it into reusable knowledge for future agents.

WerWolv / ImHex

A cross-platform hex editor with a C++-like pattern language for parsing and highlighting binary file structures.

ImranR98 / Obtainium

Android app that installs and updates apps directly from their release pages across many sources, with update notifications.

ventoy / Ventoy

Creates a bootable USB drive where you copy ISO, WIM, IMG, VHD(x), and EFI files and pick them from a boot menu.

gitleaks / gitleaks

Scans git repos, files, and stdin for hardcoded secrets such as passwords, API keys, and tokens.

github / github-mcp-server

Official MCP server that lets AI tools read repositories, manage issues and pull requests, and query GitHub Actions and security data.

YunaiV / ruoyi-vue-pro

Chinese-language full-stack admin platform (Spring Boot + Vue) with RBAC, multi-tenancy, workflow, payments, mall, CRM/ERP modules, and WeChat mini-program support.

Lakr233 / vphone-cli

Runs a virtual iPhone on an Apple Silicon Mac using Apple's Virtualization.framework, for security research and debugging.

Armur-Ai / Pentest-Swarm-AI

Autonomous API and web-app penetration testing tool that runs a swarm of AI agents to chain exploits and prove vulnerabilities.

x64dbg / x64dbg

Open-source user-mode binary debugger for Windows, built for reverse engineering and malware analysis of executables without source.

Autumn-27 / ScopeSentry

Distributed security asset discovery platform covering subdomain enumeration, port scanning, vulnerability scanning, and page monitoring.

caddyserver / caddy

Extensible HTTP/1-2-3 web server written in Go that obtains and renews TLS certificates automatically by default.

superdesigndev / treg

A registry and proxy that gives agents one base URL and token to call a catalog of third-party tool endpoints, billed per call.

google / agentmesh

Agent Mesh is a private network that lets AI agents publish and discover tools and models, with verifiable node identities.

AbdurazaaqMohammed / MP-Manager

Dual pane Material Design file manager for Android focused on viewing and managing APK files.

agentgateway / agentgateway

Open source proxy that routes and secures agent-to-LLM, agent-to-tool, and agent-to-agent traffic using MCP and A2A protocols.

openbao / openbao

Open-source, community-governed fork of HashiCorp Vault for storing, encrypting, and distributing secrets, certificates, and keys.

trufflesecurity / trufflehog

Scans repositories, filesystems, and chats for leaked credentials, then verifies whether each one is still live.

ankidroid / Anki-Android

Android app for studying Anki spaced-repetition flashcards, an official port of the Anki system.

zoicware / RemoveWindowsAI

A PowerShell script that force-removes Windows 11 AI components such as Copilot, Recall, and related AI packages.