Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Repository Index
47,133 repositories indexed
1–13 of 13 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
Tool to look for several security related Android application vulnerabilities
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
A Collection of Vulnerabilities in ERC20 Smart Contracts With Tokens Affected
Operational information regarding the 2026 php2shell vulnerabilities
Spot vulnerabilities in postgres SQL scripts
Security linter for AI-generated code: catches the exact vulnerabilities Copilot, Cursor and ChatGPT repeatedly produce. SQL injection, hardcoded secrets, JWT bypass, command injection and 15+ more rules. Grade A–F. Zero config. CI/CD ready.
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
Vulnerable Web applications Generator
Example repository for GitHub Actions Time of Check to Time of Use (TOCTOU vulnerabilities)