Agentic LLM Vulnerability Scanner / AI red teaming kit 🧪
- llm-guardrails
- llm-security
- llm-jailbreaks
- llm-scanner
Repository Index
76,356 visible repositories in the index
121–144 of 193 · Most stars
finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
- security-vulnerabilities
- security
- vulnerabilities
- lighthouse
Kubernetes-native security toolkit
- cloud-native
- golang
- kubernetes
- operator
Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.
- python
- security
- security-vulnerability
- travis
To learn common smart contract vulnerabilities using Foundry!
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
Google Dorks | Google helps you to find Vulnerable Websites that Indexed in Google Search Results. Here is the latest collection of Google Dorks. A collection of 13.760 Dorks. Author: Jolanda de Koff
- dorks
渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework
RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.
Passive Security Scanner (被动式安全扫描器)
- security-tools
- passive-vulnerability-scanner
NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Redirects, leveraging advanced scanning and URL enumeration techniques
- nuclei
- nuclei-templates
- fuzzing-templates
- nucleifuzzer
一个高价值漏洞采集与推送服务 | Collect valueable vulnerabilities and push them to various services
- dingding-bot
- vulnerability
- vulnerability-analysis
- lark-bot
Web vulnerability scanner written in Python3
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙
- vulnerability-detection
- vulnerability-research
- bugbounty
- pentesting
A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
- web
- application
- scanner
- osint
Search and download public exploits from the Vulners database — online, or fully offline from a local SQLite FTS5 index.
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
- graphql
- security-scanner
- graphql-security
- api-documentation-tool
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
- tokenization
- web-security
- compliance
- security
cwe_checker finds vulnerable patterns in binary executables
- cwe
- binary-analysis
- static-analyzer
- vulnerability-scanner
The open-source cybersecurity harness. Includes a web interface for code analysis, pentesting, vulnerability research, reverse engineering, verification, and fixing + CLI and MCP for agents.
- llm-agents
- security-research
- security-tools
- application-security
A DNS rebinding attack framework.
- dns-rebinding
- dns
- vulnerability
- attack
A modular vulnerability scanner with automatic report generation capabilities.
- artemis
- pentesting
- security
- security-scanner