Security

Open Source Cloud Native Application Protection Platform (CNAPP)

WRAITH — a modern browser-hooking framework (BeEF + blind-XSS successor) for red teams, researchers, and educators. For authorized security testing, research & education only.

Agentic AI EDR for developer workstations and autonomous agent swarms. Build Swarm Detection & Response platforms with Clawdstrike.

AI Powered penetration testing Platform for offensive security research

Self-hosted Microsoft 365 security operations dashboard — aggregates Defender XDR, Entra ID Protection, Intune, Compliance and more into one place.

Runtime security for AI agents: discover agents, map their permissions, and enforce what they can do.

Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.

A modular, skill-based autonomous Security Operations Center (SOC) agent that monitors OpenSearch/Elasticsearch data, builds RAG-based behavioral memory, and validates real-time anomalies using LLMs.

Open-source AI security verification for model artifacts, live endpoints, MCP servers, and recorded agent traces. Reproducible evidence for release decisions.

使用skill让 AI Agent 像安全分析师一样分析恶意样本 | AI Agent skill for automated malware analysis using IDA Pro

A curated list of CTF frameworks, libraries, resources and softwares

A privacy-first, local-first password manager with cross-platform synchronization.

all round pentest skill

🕵️ OSINT Tools for gathering information and actions forensics 🕵️

Text-to-SQL access control: schema selection that gives the LLM only the tables the caller is allowed to read. Row-level-security-aware table pruning for LangChain, MCP and any SQL agent. Postgres, Oracle, MySQL, SQL Server. 75% fewer prompt tokens.

Autonomous white-hat security auditor for AI-driven code review, bug bounty research, exploit construction, and execution-grounded verification.

Python scanner for CVE-2026-109618, CVE-2026-109619 and the php2shell session chains (handler mismatch + LFI). No external dependencies.

Active Directory information dumper via ADWS for evasion purposes.

A blazingly fast, multi-threaded TUI malware analysis tool built in Rust. Features deep PE parsing, YARA scanning, and heuristic risk scoring.

Multi-architecture Linux privilege escalation toolkit with 29 pre-built and runtime-compilable exploits. Auto-detects kernel version, filters patched exploits, tries each until root.

Android interception tool for component communication and attack-surface mapping

Ultimate Android Security Toolkit JAMBOREE Burp Objection Magisk 2026 Guide

Open-source cross-platform defensive spyware, stalkerware and surveillance software detector

A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers.

发现藏在前端代码里的 API，验证未授权访问风险 · 动态浏览器追踪 × JavaScript 静态分析

Knock-Knock: A Live, Multi-Protocol Honeypot Dashboard of Internet Break-in Attempts - 13 Protocols, an Extensible Framework, and a Threat-Intelligence Database Serving a Public IP Blocklist Feed

Web Fuzzing Box - Web 模糊测试字典与一些Payloads

一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

WireGuard, AmneziaWG, Cisco AnyConnect and Tailscale in one native, free and open-source macOS VPN client: SwiftUI app, Network Extension, kill switch, on-demand, and a wombat CLI

🚀 JoySafeter: An enterprise AI Agent Platform—Not just chatting. building、running、testing, and tracing autonomous Agent Teams with visual orchestration...

Agent-ready DevOps, security, infrastructure, and compliance knowledge base with 80+ skills across Kubernetes, Terraform, AWS/Azure/GCP, AI platform operations, container hardening, SOC2/ISO27001, and incident response—plus ready-to-run scripts, templates, and playbooks for SRE, platform, and security teams.

A Geiger counter for AI agents — one read-only command that inventories every agent, MCP server, plugin, and AI extension on a machine

Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, autonomous hunt loops, exploit chain builder.

Open-source security suite for OSINT, web scanning, API testing, SIEM integration, and AI-powered analysis

Open-source Claude Code skills, agents, and slash commands for AI-powered penetration testing, bug bounty hunting, and security research

云鲲自动化渗透控制台：功能介绍、使用流程、新增与优化、界面预览。当前仓库仅含文章与截图，暂无产品源码。

Open, hands-on study notes on wireless security & Wi-Fi penetration testing (802.11, WEP/WPA/WPA2/WPA3, aircrack-ng). CC BY 4.0.

Professional network monitoring & visualization tool. L0P4Map combines high-speed ARP discovery with full nmap integration and a real-time interactive network topology engine. Works on both local networks and custom IPs/websites.

Open-Source Apple T1 Chip Linux Driver Bridge 2026: Touch ID, Camera and Sensor Support

Automated Roblox Badge Bulk Deletion Tool 2026 Python Script with Token and Rate Limit Manager

RoboForm Password Manager Setup Guide for Windows 11 and 10 in 2026

Roblox Session Guard 2026: Anti Cookie Stealer Token Cleaner for Safe Gaming

Open Source Safe Roblox Account Manager 2026 Secure Clean Alt Manager

Fast Roblox Lua Obfuscator VM 2026 Custom Bytecode CFF High Performance

SOC Automation Security Suite Installer and Update Hub 2026

G Data Total Security 2026 Setup Guide for Windows 11 and 10 Install Steps

AI Web Solutions and Python Automation Projects by Krish Sharma 2026

Dr.Web Security Space Setup Guide 2026 for Windows 11 and 10

Comodo Internet Security 2026 Setup Guide for Windows 11 and 10

CVE-2026-109618/109619 — PHP session.upload_progress pre-auth RCE. Exploit research: remote ASLR chain, PoC & patch analysis.