71,235 visible repositories in the index
1–24 of 74 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
GenBI (Generative BI) for AI agents, an open-source, governed text-to-SQL through an open context layer that turns natural-language questions into trusted dashboards, charts, and SQL across 20+ data sources, such as BigQuery, Snowflake, PostgreSQL, ClickHouse, Amazon Redshift, Databricks and more.
Most advanced XSS scanner.
Web path scanner
Exploitation Framework for Embedded Devices
The recursive internet scanner for hackers. 🧡
TranslatedOneForAll is a powerful subdomain collection tool
the LLM vulnerability scanner
Bandit is a tool designed to find common security issues in Python code.
A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
TranslatedDeepAudit: An AI hacker team for everyone, putting vulnerability discovery within reach. Beginners can deploy and run it with one click, with autonomous collaborative auditing + automated sandbox PoC verification. Supports private deployment with Ollama and one-click report generation. Supports relay stations. Making security no longer expensive and auditing no longer complicated.
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
Automated Αll-in-One OS command injection exploitation tool.
AI-powered bug bounty hunting toolkit that works with or without subscription.
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
🕵️♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 2720+ actively maintained scan vectors (210+ email / 2510+ username) for security research, investigations, and digital footprinting.
w3af: web application attack and audit framework, the open source web vulnerability scanner.
the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.
💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh
Knock Subdomain Scan
A high performance offensive security tool for reconnaissance and vulnerability scanning
Snoop — инструмент разведки на основе открытых данных (OSINT world)
Loki - Simple IOC and YARA Scanner