SnailSploit / Claude-Red
claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.
swallow000 / ea-sports-fc-27-trainer-toolkit
EA SPORTS FC 27 Trainer: Reusable Profiles, Configurable Hotkeys, Game-Specific Dashboard
redteamfortress / KillerLand
Collection of reversed vulnerable drivers weaponized into process killers. PPL won't save you.
kaifcodec / user-scanner
🕵️♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 2720+ actively maintained scan vectors (210+ email / 2510+ username) for security research, investigations, and digital footprinting.
microsoft / PyRIT
The Python Risk Identification Tool for generative AI (PyRIT) is an open source framework built to empower security professionals and engineers to proactively identify risks in generative AI systems.
ihebski / DefaultCreds-cheat-sheet
One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️
JoasASantos / NeuroSploit
NeuroSploit is an advanced, AI-powered penetration testing framework designed to automate and augment various aspects of offensive security operations.
requie / AI-Red-Teaming-Guide
A comprehensive guide to adversarial testing and security evaluation of AI systems, helping organizations identify vulnerabilities before attackers exploit them.
Giskard-AI / giskard-oss
🐢 Open-Source Evaluation & Testing library for LLM Agents
We5ter / Scanners-Box
The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵
yaklang / yakit
Cyber Security ALL-IN-ONE Platform
chAng-L19 / codex-redteam-mode
针对于红队攻击思维做出的red team模式(破限项目，封号概不负责）##可自行适配其他Agent。项目问题请提issue
SecNN / AiScan-N
AiScan-N 来了！这是一款基于人工智能驱动的Ai自动化网络安全（运维）工具，专注于网络安全评估、漏洞扫描、运维、应急响应、渗透测试自动化，Ai大模型工具集【CLI Agent】 ，Ai驱动的安全检测技术，提升安全测试（运维）效率，专为企业和个人用户打造，尤其适合初学者（小白）快速上手使用，让你轻松迈入智能安全攻防时代！适用场景 ：如（红队演练、CTF比赛、Web应用渗透测试、内网横向移动、密码破解与暴力攻击、流量分析与威胁检测、APT攻击模拟、漏洞赏金挑战等场景）🎥演示视频（文章中）：https://mp.weixin.qq.com/s/7lsUdbrxkDy4P5pZhEWv7Q
mthcht / awesome-lists
Awesome Security lists for SOC/CERT/CTI
Whispergate / Labyrinth
Malware as a Service Ludus Range
stillbigjosh / adaptix-serverless-c2
Serverless C2 transport plugin for AdaptixC2 v1.2 using AWS Lambda + DynamoDB as the relay infrastructure.
LeoBanned / crocodile-gena-studio-releases
Модульная игровая утилита для Windows: управление сохранениями, игровыми компонентами и инструментами Steam в едином интерфейсе.
spellshift / realm
Realm is a cross platform Red Team engagement platform with a focus on automation and reliability.
shaheeryasirofficial / SmuggleMyPayload
SmuggleMyPayload generates HTML pages that embed and reconstruct files client-side using JavaScript. The toolkit offers multiple HTML Smuggling techniques, payload encoding options, JavaScript variations, and pre-built HTML templates.
shaheeryasirofficial / project-scorpio
A Windows process injection loader combining PPID spoofing, manual DLL mapping, module stomping, and direct NT syscall
shaheeryasirofficial / ClickMyPayload
ClickMyPayload creates realistic browser verification pages that silently copy PowerShell or CMD commands to the clipboard, display decoy tokens, and guide users to execute them via Win+R. Optional binary payloads can download automatically on page load
xk11z / plutoxAI
本系统基于 **Windows + WSL (Kali Linux)** 双环境搭建，是一套整合多类AI安全工具的一体化渗透测试平台。系统将大语言模型能力与传统渗透测试工具深度结合，覆盖Web安全、内网攻防、二进制逆向、API测试、流量分析等多个安全领域，可实现渗透测试全流程的智能化、自动化提效。
duty1g / jspacket
a lightweight, fast, and fully portable reimplementation of Impacket in TypeScript and JavaScript.
CSPF-Founder / red-clippy
open-source pentest management built to be operated by an AI agent
edoardottt / csprecon
Discover new target domains using Content Security Policy
ZeroDayEvil / CVE-2026-20817
🛡️ Official AI Security Tool module for CVE-2026-20817 (Windows Error Reporting WER ALPC Local Privilege Escalation PoC).
ricardojoserf / CrystalPotato
Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscation. Run commands, reverse shells or add users
SyntaxMethod / CVE-2026-41089-Netlogon-RCE-PoC
CVE-2026-41089 Netlogon RCE PoC — security research, vulnerability validation & defensive testing.
wddadk / Offensive-OSINT-Tools
OffSec OSINT Pentest/RedTeam Tools