基于 AI Agent + MCP 工具链 + 渗透 Skill 编排， 配合大语言模型， 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。
Repository Index
88,573 visible repositories in the index
361–384 of 1,752 · Most stars
🔍 Search anyone's digital footprint across 300+ websites
- digital-footprint
- digital-footprint-lookup
- osint
- osint-framework
pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.
- security
- pentesting
- security-tools
- python
My simple Swiss Army knife for http/https troubleshooting and profiling.
- https-troubleshoting
- http-requests
- httptracer
- redirect-urls
The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for sources and much more.
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
- endpoints
- endpoint-discovery
- bugbounty
- crawler
Loki - Simple IOC and YARA Scanner
- python
- yara
- signature
- scanner
Fast and powerful SSL/TLS scanning library.
- python
- ssl
- scans
- ssllabs
Advanced vulnerability scanning with Nmap NSE
- vulnerability
- vulnerability-scanners
- vulnerability-detection
- vulnerability-identification
Application Security Verification Standard
Cloud Security Posture Management (CSPM)
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
EMBA - The firmware security analyzer
- firmware
- linux
- embedded-linux
- security-tools
bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
A simple, secure and modern file encryption tool (and Rust library) with small explicit keys, no config options, and UNIX-style composability.
- cli
- encryption
- zero-configuration
- secure-by-default
Rapidly Search and Hunt through Windows Forensic Artefacts
- attack
- rust
- security
- threat-hunting
Automation for internal Windows Penetrationtest / AD-Security
- pentesting
- automation
- adsecurity
- privilege-escalation
Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more
- agent-skills
- claude-code-skills
- ctf
- security
Assembly and source viewer with goodies.
Malware Configuration And Payload Extraction
- configs
- debugging-tools
- malware
- malware-analysis
cSploit - The most complete and advanced IT security professional toolkit on Android.
This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter
- bugbounty
- security
- sqlinjection
- vulnerability
Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent.
A password manager that supports Bitwarden platform and KeePass (KDBX) files. It autofills your logins, supports passkeys, works offline, and runs a Watchtower that finds leaked and reused passwords and other issues.