基于 AI Agent + MCP 工具链 + 渗透 Skill 编排， 配合大语言模型， 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。
Repository Index
82,588 visible repositories in the index
241–264 of 1,068 · Most stars
JavaScript library to zip and unzip files supporting parallel compression, web streams, pluggable compression engines, zip64, split files, data encryption, and deflate64 decompression.
- zip
- javascript
- zip64
- browser
Portable Executable reversing tool with a friendly GUI
- pe-file
- pe-format
- pe-analyzer
- pe-analyzer-gui
pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.
- security
- pentesting
- security-tools
- python
My simple Swiss Army knife for http/https troubleshooting and profiling.
- https-troubleshoting
- http-requests
- httptracer
- redirect-urls
Makes reverse engineering Android apps easier, automating repetitive tasks like pulling, decoding, rebuilding and patching an APK.
- android
- apk
- frida
- reverse-engineering
Playstation 2 Static Recompiler & Runtime Tool to make native PC ports
- ps2
- recompile
- reverse-engineering
- tool
All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers
- scanner
- crawler
- information-gathering
- admin-scanner
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
- endpoints
- endpoint-discovery
- bugbounty
- crawler
Advanced vulnerability scanning with Nmap NSE
- vulnerability
- vulnerability-scanners
- vulnerability-detection
- vulnerability-identification
EMBA - The firmware security analyzer
- firmware
- linux
- embedded-linux
- security-tools
Nginx webserver and reverse proxy with php support and a built-in Certbot (Let's Encrypt) client. It also contains fail2ban for intrusion prevention.
- hacktoberfest
Database documentation built easy
- schemaspy
- java
- documentation
- database
Rails authentication with email & password.
- clearance
- ruby
- thoughtbot
- rails
A simple, secure and modern file encryption tool (and Rust library) with small explicit keys, no config options, and UNIX-style composability.
- cli
- encryption
- zero-configuration
- secure-by-default
Automation for internal Windows Penetrationtest / AD-Security
- pentesting
- automation
- adsecurity
- privilege-escalation
Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more
- agent-skills
- claude-code-skills
- ctf
- security
Malware Configuration And Payload Extraction
- configs
- debugging-tools
- malware
- malware-analysis
This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter
- bugbounty
- security
- sqlinjection
- vulnerability
A powerful and useful hacker dictionary builder for a brute-force attack
- password-generator
- wordlist-generator
- social-engineering-attacks
- password-wordlist
Automatic SSRF fuzzer and exploitation tool
- ssrf
- server-side-request-forgery
- exploitation
- vulnerability
A password manager that supports Bitwarden platform and KeePass (KDBX) files. It autofills your logins, supports passkeys, works offline, and runs a Watchtower that finds leaked and reused passwords and other issues.
巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。
- security
- pentesting
- infosec
- exploits
SIMD, SWAR & GPU kernels for strings: search, hashing, sorting, edit distances, UTF-8 segmentation & ciphers for C, C++, CUDA, Python, Rust, Go, Swift, JS, C# & Java 🦖