Automatic SQL injection and database takeover tool
- sql-injection
- detection
- exploitation
- python
Repository Index
56,139 visible repositories in the index
1–24 of 30 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
- agent-security
- agent-skills
- agentic-ai
- ai-security
Damn Vulnerable Web Application (DVWA)
- dvwa
- php
- sql-injection
- security
TranslatedA comprehensive security assessment tool developed in-house by Chaitin (长亭), supporting scanning for common web security issues and custom PoCs | Be sure to read the documentation before use
- security
- vulnerability
- vulnerability-scanner
- passive-vulnerability-scanner
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
- anti-analysis
- anti-debugging
- anti-sandbox
- anti-vm
External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.
- external-secrets
- kubernetes
- kubernetes-secrets
- secrets-manager
The Official USB Rubber Ducky Payload Repository
- badusb
- ducky-payloads
- duckyscript
- hak5
Automated Αll-in-One OS command injection exploitation tool.
- python
- command-injection
- detection
- exploitation
Translated💖 ASP.NET Core 8.0 full-stack tutorial, a front-end/back-end separated backend API, companion to the Vue tutorial, official documentation:
- netcore
- automapper
- repository
- t4
w3af: web application attack and audit framework, the open source web vulnerability scanner.
Server-Side Template Injection and Code Injection Detection and Exploitation Tool
Automated NoSQL database enumeration and web application exploitation tool.
- nosql
- nosql-databases
- penetration-testing
- scanner
Wireless keystroke injection attack platform
Reverse engineering tool for Linux
- gdb
- cheat-engine
- reverse-engineering
- injection
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.
- encryption-server
- encryption
- crypto
- cryptography
USB Keystroke Injection Protection
dll injection tool that implements various methods
Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.
Inject OWASP recommended HTTP Headers for increased security in a single line
- aspnetcore
- middleware
- owasp
- security
Find known secrets in your AI coding agent sessions (Claude Code, Codex, Cursor), then guard the next one with local hooks that trace risky commands to the content that dictated them. Open source, no telemetry.
- agent-security
- ai-agents
- ai-security
- claude-code
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
- ai-safety
- ai-security
- claude-code
- llm-agent