Lists (9)
Stars
From a goal to a task DAG, automatically. TypeScript-native multi-agent orchestration with MCP and live tracing. Three runtime dependencies.
A Vulnerablity Radar That Runs With GIthub Actions
AI Code Security Anti-Patterns distilled from 150+ sources to help LLMs generate safer code.
A modular framework for benchmarking LLMs and agentic strategies on security challenges across HackTheBox, TryHackMe, PortSwigger Labs, Cybench, picoCTF and more.
DiffRays is a research-oriented tool for binary patch diffing, designed to aid in vulnerability research, exploit development, and reverse engineering.
A LLM guide to fingerprinting software
A next-generation HTTP stealth proxy which perfectly cloaks requests as the Chrome browser across all layers of the stack.
A list of public penetration test reports published by several consulting firms and academic security groups.
Nuclei templates for source code analysis. Detects hardcoded secrets, config leaks, debug endpoints. Also helps identify OWASP Top 10 issues in code. Ideal for SAST and CI/CD integration.
The recursive internet scanner for hackers. 🧡
A smarter web fuzzing tool that combines local LLM models and ffuf to optimize directory and file discovery
A repository of credential stealer formats
Nuclei POC，每2小时更新 | 自动整合全网Nuclei的漏洞POC，实时同步更新最新POC，保存已被删除的POC。通过批量克隆Github项目，获取Nuclei POC，并将POC按类别分类存放，使用Github Action实现。已有41w+POC，其中3.5w+高质量POC
Repository of AI-generated Nuclei templates for public CVEs not yet covered by existing templates, enhancing detection speed and coverage 👾
Vulnerable Target (VT) is a specialized tool designed for security professionals, researchers, and educators that creates intentionally vulnerable environments across multiple platforms.
A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.
Automate browser based workflows with AI
Curated list of open-source & paid Attack Surface Monitoring (ASM) tools.
XBOW Validation Benchmarks
Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.
Modern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities.