Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Repository Index
47,133 repositories indexed
1–24 of 182 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
- penetration-testing
- pentesting
- security-audit
- security-automation
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!
- decompiler
- decompiler-engine
- c-sharp
- dotnet
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
- agent-security
- agent-skills
- agentic-ai
- ai-security
✨ AI Spreadsheet for Business
- airtable
- airtable-alternative
- database
- no-code
⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
- decryption
- natural-language-processing
- cryptography
- cipher
🩵 A free, open-source app store for developers' releases on GitHub, Codeberg & Forgejo — browse, discover, and install apps with one click. Formerly GitHub Store.
Collection of malware source code for a variety of platforms in an array of different programming languages.
- malware
- malware-research
- malware-development
- malware-detection
A lightweight WebAssembly runtime that is fast, secure, and standards-compliant
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
A 100% free modern JS SaaS boilerplate (React, NodeJS, Prisma). Full-featured: Auth (email, google, github, slack, MS), Email sending, Background jobs, Landing page, Payments (Stripe, Polar.sh), Shadcn UI, S3 file upload. AI-ready with tailored AGENTS.md, skills, and Claude Code plugin. One cmd deploy. Powered by Wasp full-stack framework.
- full-stack
- open-source
- saas
- nodejs
A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
- java-decompiler
- apk
- java
- procyon
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
- static-analysis
- static-analyzers
- linter
- code-quality
Source code for Hacker101.com - a free online web and mobile security class.
CTF framework and exploit development library
✍🏻 Source Code Deep Dives, System Design & Engineering Blogs | Halfrost-Field 冰霜之地：源码解析、系统设计与工程实践笔记
- ios
- objective-c
- swift
- javascript
All parts of Claude Code's system prompt, 27 builtin tool descriptions, sub agent prompts (Plan/Explore/Task), utility prompts (CLAUDE.md, compact, statusline, magic docs, WebFetch, Bash cmd, security review, agent creation). Updated for each Claude Code version.
- claude-code
- claude-code-system-prompts
- system-prompts
go-admin is a Gin + Vue starter kit for admin applications, supporting Element UI, Arco Design, and Ant Design. Features include multi-tenancy, user management, JWT authentication, RBAC, code generation, a form builder, and scheduled tasks. Build your own admin app in just 3 minutes.
- gin
- casbin
- gin-admin
- vue-admin
IronClaw is an Agent OS focused on privacy, security and extensibility
- codeact
- openclaw
- rlm
- rust
Low code web framework for real world applications, in Python and Javascript
- frappe
- erpnext
- python
- javascript
Enable Opencode to authenticate against Antigravity (Google's IDE) via OAuth so you can use Antigravity rate limits and access models like gemini-3-pro and claude-opus-4-5-thinking with your Google credentials.
Foundry is a blazing fast, portable and modular toolkit for Ethereum application development written in Rust.
fq - jq for binary formats. Tool, language and decoders for working with binary formats.
- jq
- binary
- hexdump
- go