Repository Index

Fully autonomous AI Agents system capable of performing complex penetration testing tasks

• ai-agents
• ai-security-tool
• autonomous-agents
• golang

Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.

• llm
• prompt-engineering
• prompts
• llmops

Adversary Emulation Framework

• security-tools
• implant
• golang
• dns-server

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

• anti-analysis
• anti-debugging
• anti-sandbox
• anti-vm

Open-Source Shellcode & PE Packer

• shellcode
• antivirus-evasion
• redteam
• hacktoberfest

An information security preparedness tool to do adversarial simulation.

• uber
• vagrant
• yaml
• celery

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.

Hacking Toolkit

• network-analysis
• networking
• scapy
• python3

A Linux packet crafting tool.

• packet-crafting
• networking
• hacking-tool
• intrusion-prevention

🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.

• padding-oracle
• aes
• decryption
• encryption

Quantum Insert

• quantum-insert
• python
• detection
• pcap

quick and dirty canbus h4xing framework

• automotive-security
• canbus
• car-hacking

TranslatedFush Vue MCP — Vue frontend reverse engineering + web security testing tool (Chrome extension + MCP server, 91 tools)

• ai-agents
• anti-debug
• chrome-extension
• mcp

Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.

• cybersecurity
• hacking
• iast
• dast

NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics

• android-hacking
• baseband
• bootloader-unlock
• checkm8

:ghost: :flashlight: Invisible JS code execution & social engineering.

Want to crack passwords faster by using a wordlist that fits your 'target audience'? Use WikiRaider.

• wordlist
• wikipedia
• dictionary
• attack