The AI Agent for Cyber Security.
- ai-agent
- ai-security
- appsec
- bug-bounty
47,133 repositories indexed
25–48 of 49 · Most stars
The AI Agent for Cyber Security.
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
Security libraries for ASP.NET
OWASP Honeypot, Automated Deception Framework.
Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF
Simple authorization gem for GraphQL :lock:
Very simple SAML 2.0 consumer module for ASP.NET/C#
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
Inject OWASP recommended HTTP Headers for increased security in a single line
A USB proxy based on raw-gadget and libusb
Middleware for adding security headers to an ASP.NET Core application.
Django application that performs SAST and Malware Analysis for Android APKs
This is an aspiring project aimed at accumulating knowledge from the world of cybersecurity and presenting it in a cogent way, so it is accessible to as large an audience as possible and so that everyone has a good resource to learn hacking from.
GasPot originally released at Blackhat 2015 - Updated for the same stuff 2026
Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects
okta-aspnet
A honeypot for the Log4Shell vulnerability (CVE-2021-44228).
Blazor.BFF.AzureAD.Template, Blazor WASM hosted in ASP.NET Core using Microsoft Entra ID BFF (server authentication)
Security training for the apps you actually ship. Open your browser and start hacking.
🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.
Script for turning a Raspberry Pi into a Honey Pot Pi
Prompt-injection firewall for LLM applications — 33 input detectors, 9 output scanners, federated ed25519-signed threat-intel feed. Apache 2.0, 1040 tests, F1 96.0% with 0% false positives. Docker, GitHub Action, LangChain/LlamaIndex/CrewAI integrations.
MICROS Honeypot is a low interaction honeypot to detect CVE-2018-2636 in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (MICROS). This is a directory traversal vulnerability.