Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Web path scanner
Exploitation Framework for Embedded Devices
The recursive internet scanner for hackers. 🧡
the LLM vulnerability scanner
Bandit is a tool designed to find common security issues in Python code.
Automated Αll-in-One OS command injection exploitation tool.
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
- phishing
- typosquatting
- domains
- dns
w3af: web application attack and audit framework, the open source web vulnerability scanner.
A high performance offensive security tool for reconnaissance and vulnerability scanning
Loki - Simple IOC and YARA Scanner
- python
- yara
- signature
- scanner
Automated NoSQL database enumeration and web application exploitation tool.
Find web directories without bruteforce
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
A modular vulnerability scanner with automatic report generation capabilities.
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
A friendly car security exploration tool for the CAN bus
- python
- can-bus
- security-scanner
- security-testing
Modular file scanning/analysis framework
- python
- analytic-machines
- analysis-framework
- python-script
AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.
🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️
Gixy-Next: NGINX Configuration Security Scanner & Performance Checker
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation