Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
the LLM vulnerability scanner
A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
- anti-analysis
- anti-debugging
- anti-sandbox
- anti-vm
Adversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red and Blue Teams
- python
- attack
- adversarial-machine-learning
- poisoning
Open-source AI red teaming toolkit from Microsoft. Test generative AI systems with automated scans, adaptive multi-turn attacks, and a web UI.
Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.
- csharp
- situational-awareness
👋🧩Template repository for ReVanced Patches
SIMD, SWAR & GPU kernels for strings: search, hashing, sorting, edit distances, UTF-8 segmentation & ciphers for C, C++, CUDA, Python, Rust, Go, Swift, JS, C# & Java 🦖
💉 ReVanced Patcher used to patch Android applications
HElib is an open-source software library that implements homomorphic encryption. It supports the BGV scheme with bootstrapping and the Approximate Number CKKS scheme. HElib also includes optimizations for efficient homomorphic evaluation, focusing on effective use of ciphertext packing techniques and on the Gentry-Halevi-Smart optimizations.
- helib
- privacy-enhancing-technologies
- cryptography
- privacy-by-design
Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing
- parameter-finder
- parameter
- bugbounty
- content-discovery
Track any ip address with IP-Tracer. IP-Tracer is developed for Linux and Termux. you can retrieve any ip address information using IP-Tracer.
- information-retrieval
- information-gathering
- termux-tool
- ip-location
Cecil is a library to inspect, modify and create .NET programs and libraries.
A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.
- sudo-exploitation
- abuse-sudo
- ctf
- exploits
Open-Source Shellcode & PE Packer
- shellcode
- antivirus-evasion
- redteam
- hacktoberfest
Agentic LLM Vulnerability Scanner / AI red teaming kit 🧪
A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.
pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)
- netcat
- ncat
- nc
- port-forwarding
Ruby's Most Advanced Authentication Framework
Burp extension to evade TLS fingerprinting. Bypass WAF, spoof any browser.
- burpsuite
- burp-extensions
- tls
- tls-fingerprint
Bypass Chromium's App-Bound Encryption via Direct Syscall-based Reflective Process Hollowing. Extract cookies, passwords, payment methods & tokens from Chrome, Edge, Brave & Avast - fileless, user-mode, no admin required.
- app-bound
- brave
- chrome
- chromium
Template-Driven AV/EDR Evasion Framework
- obfuscation
- pinvoke
- dinvoke
- code-injection
A high-speed covert tunnel that disguises TCP traffic as SMTP email communication to bypass Deep Packet Inspection (DPI) firewalls.