The Big Brother V5.0 is a weaponized OSINT platform featuring username enumeration (473+ platforms), quad-vector visual intelligence, Sky Radar tracking, crypto wallet analysis, SSL intelligence, d…

Python Exploitation Framework, V8 Engine Debugger, Proxy interceptor, marketplace, post-exploitation, backdoor generator,....

Model Context Protocol Servers

Reusable GitHub Action for AI-powered code review with Claude

OWASP API Security Project

CLI component of OWASP PurpleTeam

GitHub Attack Toolkit - Extreme Edition

Automated Penetration Testing Agentic Framework Powered by Large Language Models

A collection of skills for AI coding agents from Semgrep

Open-source AI hackers to find and fix your app’s vulnerabilities.

AI-powered security scanner for developers — 18 agents, 80+ attack classes, one command

AIRecon is an autonomous cybersecurity agent that combines a self-hosted Large Language Model (Ollama) with a Kali Linux Docker sandbox and a Textual TUI. It is designed to automate security assess…

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

🪨 why use many token when few token do trick — Claude Code skill that cuts 65% of tokens by talking like caveman

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks.

Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.

🧵 CLI tool for directly patching container images!

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

Created by High-Tech Bridge, the Purposefully Insecure and Vulnerable Android Application (PIVAA) replaces outdated DIVA for benchmark of mobile vulnerability scanners.

Repo to accompany my mastering LLM engineering course

An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.

Ralph is an autonomous AI agent loop that runs repeatedly until all PRD items are complete.

Burp Suite extension for API security testing with 15 attack types, 108+ payloads, intelligent fuzzing, BOLA/IDOR detection, AI integration, and automated reconnaissance. Supports REST/GraphQL/SOAP…

This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL

Open-Source Unified Vulnerability Management, DevSecOps & ASPM

A deliberately vulnerable banking application designed for practicing Security Testing of Web App, APIs, AI integrated App and secure code reviews. Features common vulnerabilities found in real-wor…

Very Vulnerable Management API (VVMA) is a deliberately insecure RESTful API built with Node.js for educational and testing purposes. It includes vulnerabilities from the OWASP Top 10 API, allowing…