76,855 visible repositories in the index
1–24 of 57 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
the LLM vulnerability scanner
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
Reverse engineering and pentesting for Android applications
Bjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potential vulnerabilities. Bjorn can perform brute force attacks, file stealing, host zombification, and supports custom attack scripts.
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
Hunt for security weaknesses in Kubernetes clusters
Windows Exploit Suggester - Next Generation
w3af: web application attack and audit framework, the open source web vulnerability scanner.
A high performance offensive security tool for reconnaissance and vulnerability scanning
信息收集自动化工具
pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.
Fast and powerful SSL/TLS scanning library.
巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。
一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。
Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能
A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228
Tool to look for several security related Android application vulnerabilities
File upload vulnerability scanner and exploitation tool.
Platform Security Assessment Framework
Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.
Security scanner for AI agents, MCP servers and agent skills.
Visa Vulnerability Agentic Harness