Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.
- cve
- security
- security-alerts
- vulnerability
47,133 repositories indexed
337–360 of 567 · Most stars
Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.
Automated Tactics Techniques & Procedures
Things we learned from Capture The Flag hacking competitions we participated in.
Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.
This is quick session for net/http in golang. This package is perhaps the best implementation of the session mechanism, at least it tries to become one.
Sandia Cyber Omni Tracker (SCOT)
:hammer: A multiple reverse shell session/client manager via terminal
POT is an Erlang library for generating Google Authenticator compatible one time passwords
:elephant: :busts_in_silhouette: Manage PostgreSQL roles and privileges from YAML or LDAP
Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant
'Packet Capture Forensic Evidence eXtractor' is a tool that finds and extracts files from packet capture files
Secure shell history commands by finding sensitive data
🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
The fastest communications possible. Delphi rulez.
Merge multiple pcap files together, gracefully.
A desktop app where AI agents decompile the games you own into C/C++ that rebuilds them byte for byte.
"Evolving AppCompat/AmCache data analysis beyond grep"
EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
Protect your SIP Servers from bad actors at https://sentrypeer.org
JWT implementation in Crystal
Wraps around various tools and provides some additional checks/information to produce a centralized report of a PE file.
A cryptographic toolkit written in Common Lisp
This is an aspiring project aimed at accumulating knowledge from the world of cybersecurity and presenting it in a cogent way, so it is accessible to as large an audience as possible and so that everyone has a good resource to learn hacking from.