Fail-closed swarm orchestration with epoch-fenced work and late-completion rejection.
- agent-orchestration
- ai-agents
- fail-closed
- fencing-token
Repository Index
47,133 repositories indexed
241–264 of 399 · Most stars
Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.
- cve
- security
- security-alerts
- vulnerability
Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.
- ai-agents
- autonomous-agents
- kali-linux
- llm-agents
Create adversarial attacks against machine learning Windows malware detectors
- adversarial-machine-learning
- infosec
- python
- attack
Trending open projects that reverse engineered apps, games, consoles, protocols and devices, plus the tools they used. Star trends refreshed daily.
- awesome
- awesome-list
- clean-room
- decompilation
THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING
- ai-bug-bounty
- ai-bug-finder
- ai-bug-reporter
- ai-hacking
Simulates enough of a Telnet connection in order to log failed login attempts.
blockchain (crypto) tools, libraries & scripts in ruby
- blockchain
- cryptohash
- distributed-database
- proof-of-work
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
- anti-bot
- behavioral-analysis
- bot-detection
- captcha
🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️
A framework for the JOSE standards JWS, JWE, and JWK written in Swift.
- jws
- jwk
- swift
- jwe
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
- ai-safety
- ai-security
- claude-code
- llm-agent
🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.
- padding-oracle
- aes
- decryption
- encryption
A desktop app where AI agents decompile the games you own into C/C++ that rebuilds them byte for byte.
- ai
- artificial-intelligence
- artificialintelligence
- decompilation
BINNY: an open source agent harness for reverse engineering. Plug in any model, or a local one.
- ghidra
- llm-agent
- malware-analysis
- ollama
This is an aspiring project aimed at accumulating knowledge from the world of cybersecurity and presenting it in a cogent way, so it is accessible to as large an audience as possible and so that everyone has a good resource to learn hacking from.
A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.
- binary-instrument
- android
- malware-research
- reverse-engineering
gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/
- suricata
- parse
- security-tools
- network-security
Toggle the iPhone call-recording announcement on/off from a Windows GUI, built on the airlift AirTraffic sandbox escape.
- airlift
- airtraffic
- ios
- sandbox-escape
Simple role-based authorization library for Ruby on Rails
- authorization
- gem
- multitenancy
- rails
Watchtower | Self-hosted AI security assessment, asset intelligence, and evidence workflows.
- ai-agents
- attack-surface-management
- docker
- penetration-testing
Nail in the JKS coffin - Cracking passwords of private key entries in a JKS file
Open-source OSINT intelligence dashboard tracking the Iran conflict in real time — live DeckGL/MapLibre conflict map, 30 bias-labeled feeds, actor dossiers, and daily briefs. Live at conflicts.app.
- deckgl
- geopolitics
- intelligence
- maplibre
TranslatedA domain searcher named GoogleSSLdomainFinder - a subdomain lookup tool based on Google SSL certificate transparency
- domain-scanner
- subdomain