Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Repository Index
67,262 visible repositories in the index
1–24 of 29 · Most stars
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
- ai-agents
- ai-security-tool
- autonomous-agents
- golang
SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024]
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
Translated张雪峰.skill (Zhang Xuefeng.skill) — Zhang Xuefeng's cognitive operating system. A practical thinking framework for college entrance exam application choices, postgraduate entrance exams, and career planning. Generated by 女娲.skill (Nüwa.skill).
- agent-skills
- career-planning
- claude-code
- claude-code-skills
claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.
- claude-ai
- claude-skills
- redteam
- redteam-tools
The open-source, privacy-friendly CAPTCHA you host yourself. Bots and AI agents out, people in.
- captcha
- javascript
- proof-of-work
- antispam
TranslatedA long-form web novel writing assistance system based on Claude Code, solving the "forgetting" and "hallucination" problems in AI writing, and supporting serialized writing at the scale of 2,000,000 characters.
- ai-writing
- chinese-novel
- deepseek-harness
- dsh-plugin
Skills for threat modeling, scanning, triage, patching, plus an autonomous scanning harness you can /customize
autonomous red teaming platform; multi-agent offensive-security meta-harness
- agents
- ai
- multi-agent
- offensive-security
TranslatedMulti-model collaborative workflow engine — with one command, /ccg:go, the AI automatically analyzes intent, chooses a strategy, and orchestrates Codex + Gemini + Claude to collaborate on execution
TranslatedExtremely lightweight | Stops defensive writing in papers | Anti-defensive writing for academic papers — 学术写作原则 Skill + prompt pack (CN/EN)
- academic-writing
- ai-writing
- claude-skill
- paper-writing
A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.
- ai-security
- anthropic
- application-security
- bug-bounty
🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.
- adversarial-ai
- claude-code
- cursor
- electron-security
Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we configure the agent for adversarial thinking, and perform research or attack/defense operations.
Open-source AI-powered offensive security harness for automated penetration testing.
- agents
- ai-hacking
- ai-penetration-testing
- ai-pentesting
用 Claude Code Skills 做的视频剪辑 Agent
Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.
- ai-agents
- bug-bounty
- cybersecurity
- offensive-security
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
A bridge between Streamable HTTP and stdio MCP transports
- mcp
- mcp-server
- proxy
- sse
Codex skill for removing defensive writing and strengthening prose.
- academic-writing
- codex
- codex-skill
- editing
GenUI for DeepSeek Harness: interactive UI components rendered inline in assistant replies via the dsh-ui fence — layout, charts, plots, forms, quizzes, mermaid, 3D scenes, and an action event loop back to the model. Ships the fence-teaching host plugin, the browser renderer (client half), and the genui skill.
HERO = Hashing · Edge cases · Rubrics · Overbuild — the four shapes coding agents over-defend in. A paste-in contract that stops them. Works with Claude Code, Codex, Antigravity, Cursor, Copilot, Windsurf, Gemini CLI.
- agents-md
- ai-agents
- claude-code
- claude-md