47,133 repositories indexed
1–22 of 22 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
[MLsys2026 Best Paper]: https://arxiv.org/abs/2506.08276. RAG on Everything with LEANN. Enjoy 97% storage savings while running a fast, accurate, and 100% private RAG application on your personal device.
Integrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication. 🔁 Mirror of https://codeberg.org/allauth/django-allauth/
PyInstaller Extractor
Investigate malicious Windows logon by visualizing and analyzing Windows event log
Find web directories without bruteforce
Bloodhound Reporting for Blue and Purple Teams
🕵️ Tool to reverse-engineer Protocol Buffers with unknown definition
Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.
Defanged Indicator of Compromise (IOC) Extractor.
Machinae Security Intelligence Collector
Create adversarial attacks against machine learning Windows malware detectors
Open Source SIEM (Security Information and Event Management system).
Swagger/YApi convert jmx tool.
2 Factor Authentication for Wagtail
AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
This script takes a file or directory as input, uses GPG AES256 symmetric encryption with the password you provide and adds it to IPFS and returns the IPFS hash.
Example repository for GitHub Actions Time of Check to Time of Use (TOCTOU vulnerabilities)
Packing detection tool for PE files
A tool to extract local data storage of an Android application in one click.
Prompt-injection firewall for LLM applications — 33 input detectors, 9 output scanners, federated ed25519-signed threat-intel feed. Apache 2.0, 1040 tests, F1 96.0% with 0% false positives. Docker, GitHub Action, LangChain/LlamaIndex/CrewAI integrations.