Fully autonomous AI Agents system capable of performing complex penetration testing tasks
- ai-agents
- ai-security-tool
- autonomous-agents
- golang
Repository Index
47,133 repositories indexed
1–24 of 36 · Most stars
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
CTF framework and exploit development library
Program for determining types of files for Windows, Linux and MacOS.
- debugger
- detect
- unpacker
- disassembler
Six Degrees of Domain Admin
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
- reverse-engineering
- rop
- rop-exploitation
- rop-gadgets
DIE engine
- signature
- reverse-engineering
- unpacker
- yara
Cloud native secrets management for developers - never leave your command line for secrets.
- secrets
- secret-management
- vault
- hashicorp
SteamKit2 is a .NET library designed to interoperate with Valve's Steam network. It aims to provide a simple, yet extensible, interface to perform various actions on the network.
- steamkit2
- c-sharp
- nuget
- steam
The repository host gives no description.
TranslatedBased on an in-depth REA teardown, a high-fidelity recreation of the official Claude desktop UI. Recreates 30 independent React components and 8 hardcore interaction physics algorithms, and comes with a 3000+ line reverse-engineering analysis manual.
- anthropic
- audioworklet
- claude
- design-system
PE Tools - Portable executable (PE) manipulation toolkit
- pefile
- hex-editor
- disassembler
- entropy
:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.
Simple, drag-and-drop, password-based file encryption
- encryption-utility
- cross-platform
- encryption
- gui
A framework for automated extraction of static and dynamic features from Android applications
- android-malware-detection
- android-analysis
A clean room recreation of Auth0 with 1:1 drop in replacement feature parity.
ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
- anti-bot
- behavioral-analysis
- bot-detection
- captcha
Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️
- devsecops
- entropy
- gdpr
- golang
BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)
A honeypot for malware that propagates via USB storage devices
A probably paranoid Golang utility library for securely hashing and encrypting passwords based on the Dropbox method. This implementation uses Blake2b, Scrypt and XSalsa20-Poly1305 (via NaCl SecretBox) to create secure password hashes that are also encrypted using a master passphrase.
- golang
- golang-library
- scrypt
- password-hash
Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes
- entropy
- pe-file
- pe-files
- pe-format