Repository Index

Linux Binary Exploitation

• linux
• binaries
• exploitation
• stackoverflow

The open-source AI security harness. Includes a web interface for code analysis, pentesting, vulnerability research, reverse engineering, verification, and fixing + CLI and MCP for agents.

• llm-agents
• security-research
• security-tools
• application-security

A DNS rebinding attack framework.

• dns-rebinding
• dns
• vulnerability
• attack

A modular vulnerability scanner with automatic report generation capabilities.

• artemis
• pentesting
• security
• security-scanner

DIVA Android - Damn Insecure and vulnerable App for Android

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.

• cve-scanning
• pentesting-tools
• rust
• vulnerability-scanners

Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.

Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.

RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins!

• wordlist
• rockyou
• rockyou2021
• wordlists

Official OpenMage LTS codebase | Migrate easily from Magento Community Edition in minutes! Download the source code for free or contribute to OpenMage LTS | Security vulnerability patches, bug fixes, performance improvements and more.

• magento-1
• php
• ecommerce
• ecommerce-platform

Reusable prompts for a structured, evidence-first bug bounty hunting workflow

• application-security
• bug-bounty
• bug-bounty-hunting
• cybersecurity

Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.

• anti-crawling
• cloud-native
• crawler
• deception

The AI Agent for Cyber Security.

• ai-agent
• ai-security
• appsec
• bug-bounty

Oversecured Vulnerable Android App

• appsec
• android-security
• vulnerable-application
• vulnerable-android-apps

PoC for jsserver vulnerability in webOS 3.5+(?)

• exploit
• lg
• lgtv
• root

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

• application-security
• appsec
• bug-bounty
• burp-alternative

Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.

• codereview
• cybersecurity
• ruby
• sinatra

phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code

• php
• php-codesniffer
• phpcs
• static-code-analysis

Learn about a type of vulnerability that specifically targets machine learning models

• awesome-list
• awesome

AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.

• ai
• attack-surface-management
• bbot
• cybersecurity

🔪Browser logic vulnerabilities :skull_and_crossbones:

• security
• browser
• xss
• vulnerability

A Collection of Vulnerabilities in ERC20 Smart Contracts With Tokens Affected

• smart-contracts
• erc20-tokens
• vulnerabilities
• solidity

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

• sast
• security-tools
• security-scanner
• security-automation

The repository host gives no description.