NationalSecurityAgency / ghidra

Ghidra is a software reverse engineering (SRE) framework

ifixai-ai / iFixAi

Independent Auditing of AI Agents. Run by human or the agent itself, to answer the most crucial question in the AI Agent Economy. Is the agent doing what is supposed to do? With iFixAi you can have this answer in less than 120 seconds.

vxcontrol / pentagi

Fully autonomous AI Agents system capable of performing complex penetration testing tasks

zhaoxuya520 / reverse-skill

Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients 逆向/渗透/安全技能路由包 - AI 自动路由 + 按需自举工具链 + 自动进化经验库 | 支持 Claude Code / Kiro / Cursor / Cline 等代码 AI 客户端

interplains / zero-breach

Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.

WerWolv / ImHex

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

ImranR98 / Obtainium

Get Android app updates straight from the source.

gitleaks / gitleaks

Find secrets with Gitleaks 🔑

YunaiV / ruoyi-vue-pro

🔥 官方推荐 🔥 RuoYi-Vue 全新 Pro 版本，优化重构所有功能。基于 Spring Boot + MyBatis Plus + Vue & Element 实现的后台管理系统 + 微信小程序，支持 RBAC 动态权限、数据权限、SaaS 多租户、Flowable 工作流、三方登录、支付、短信、商城、CRM、ERP、MES、IM、AI 大模型、IoT 物联网等功能。你的 ⭐️ Star ⭐️，是作者生发的动力！

rawfilejson / awesome-osint-arsenal

OSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.

Armur-Ai / Pentest-Swarm-AI

Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.

x64dbg / x64dbg

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

danielmiessler / SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

opentrap / opentrap

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

Autumn-27 / ScopeSentry

ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes

escudero / brandpose

Personal project: where shoppers look, estimated from an ordinary security camera and open source AI (YOLO11, Gaze-LLE, Depth Anything V2)

google / agentmesh

Agent Mesh

AbdurazaaqMohammed / MP-Manager

Dual pane Android file manager with focus on APKs

Icontainertia / Adobe-Substance-3d

Creative Studio App 2026 – Full working installer with enhanced security protocols for secure digital asset deployment.

outerashcable97 / AnyDesk

AnyDesk 2023: Full working installer with enhanced security and improved remote access features.

Fazmin / cve-intel

Local security intelligence for CVE triage - 31 data sources and 32 tools, risk scores and an MCP server for AI agents, all in native Rust. Private by default.

edoardottt / awesome-hacker-search-engines

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

OWASP / wstg

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

CyberDefenderAI / AI-Data-Security-Governance

In the era of Generative AI, the data is the primary attack surface. This module focuses on securing the ML data pipeline from ingestion to vector storage, ensuring that the foundation of the AI model remains uncompromised and privacy-compliant.

CasterPalace / kahoot-answer-rpocket-team-free-access

Get correct Kahoot answers instantly and free—no limits, fees, or subscriptions. Boost your quiz scores now.

ventz / wombat-vpn

WireGuard, AmneziaWG and Cisco AnyConnect in one native, free and open-source macOS VPN client: SwiftUI app, Network Extension, kill switch, on-demand, and a wombat CLI

VirtualPurser / Far-Cry-3-Value-Forge-resocket

Far Cry 3 Ultimate Trainer & Memory Editor 2026 Toolkit

SelfGeckoBoiler / rpocket-team-Python-Memory-Forge

Far Cry 3 Memory Editor Python Script 2026: Modify Health, Money, Ammo and Items

kernelstub / Pwnbox

Privacy focused NixOS pentesting environment with a customizable desktop and security tools.

better-isms / grcskills

Open GRC skills for AI agents. By ISMS Copilot.

SilentisVox / SyscallRevenant

Clean Indirect Syscalls with Syscall Tampering.

chaenmasahiro0425 / claude-security-scan

「セキュリティチェックして」の一言で、Mac・リポジトリ・GitHub・Vercel・AWS・Gmailを読み取り専用で横断点検する Claude Code スキル

JoasASantos / Malvex

AI-driven malware analysis framework with 30+ integrated tools, web REPL, and MCP server

CyberDefenderAI / AI-Security-Tools-Applied-Scenarios

A highly actionable, curated list of open-source tools and practical use cases leveraging AI, ML, and LLMs to solve complex information security challenges. This module bridges the gap between theoretical AI capabilities and daily security operations.

CyberDefenderAI / Attack-Evidence-Compensating-Controls

A highly technical forensic and architectural guide. This module details exactly how AI-specific attacks manifest in system telemetry, followed by the rigorous, defense-in-depth security controls required to neutralize them.

irraz / vulnerator-ai

Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.

CyberDefenderAI / Cybersecurity-in-the-field-of-AI

This repository is a consolidated directory divided into five standalone, deep-dive modules. Each module comprehensively covers a specific domain of AI implementation, vulnerabilities, threat modeling, and automated defense mechanisms.

opengrep / opengrep

🔎 Static code analysis engine to find security issues in code.

kamalx06 / TornadoC2

Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go binary agent with every property baked in at build time. Multi-operator team server with RBAC, audit chain, and a Qt/CLI console. Linux + Windows, amd64 + arm64.

PrivateBin / PrivateBin

A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.

felixkumardev1997q4 / rainbow-six-mod-menu-2026

Proposed C++ mod menu framework for Rainbow Six Siege, intended for security researchers studying game anti-cheat behavior; no implementation or releases are confirmed.

samlu / CamMonitor

CamMonitor turns your spare Android phone into a private, zero-account home security camera. Connect two Android devices directly using peer-to-peer (P2P) encryption over Wi-Fi or cellular networks without cloud subscriptions, login accounts, or third-party servers storing your video.

threathunterX / underground-slang-lexicon

A continuously updated lexicon of underground slang in the online fraud and gray-market economy: definitions, supply-chain roles, sanitized real-world usage and false-positive warnings. Chinese-dominant, with Brazilian Portuguese, English, Indonesian, Tagalog and Vietnamese entries. Maintained by the Threat Hunter research team.

cisagov / ScubaGear

Automation to assess the state of your M365 tenant against CISA's baselines

OpenZeppelin / openzeppelin-contracts

OpenZeppelin Contracts is a library for secure smart contract development.

rubysec / ruby-advisory-db

A database of vulnerable Ruby Gems

terraform-google-modules / terraform-google-service-accounts

Creates one or more service accounts and grants them basic roles

affaan-m / ECC

The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.

ruvnet / RuView

π RuView turns commodity WiFi signals into real-time spatial intelligence, vital sign monitoring, and presence detection — all without a single pixel of video.

sherlock-project / sherlock

Hunt down social media accounts by username across social networks

Developer-Y / cs-video-courses

List of Computer Science courses with video lectures.

caddyserver / caddy

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

usestrix / strix

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

gatsbyjs / gatsby

React-based framework with performance, scalability, and security built in.

KeygraphHQ / shannon

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

mitmproxy / mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

GyulyVGC / sniffnet

Comfortably monitor your network traffic 🕵️‍♂️

The-Vibe-Company / quivr

An open-source engine that turns continuous content streams into search and monitoring. Durable ingestion, hybrid search, alerts, and plugins for formats, models and business rules.

soxoj / maigret

🕵️‍♂️ Collect a dossier on a person by username from 6K websites

sqlmapproject / sqlmap

Automatic SQL injection and database takeover tool