Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Six Degrees of Domain Admin
🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection
Android Reverse-Engineering Workbench for VS Code
- apktool
- apk-decompiler
- apk-editor
- smali
Cecil is a library to inspect, modify and create .NET programs and libraries.
Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
A generic, spec-compliant, thorough implementation of the OAuth request-signing logic
Th3Inspector 🕵️ Best Tool For Information Gathering 🔎
- information-gathering
- reverse-phone-lookup
- mx-lookup
- whois-lookup
DRAKVUF Black-box Binary Analysis
:rocket: An open source alternative to searx which provides a modern-looking :sparkles:, lightning-fast :zap:, privacy respecting :disguised_face:, secure :lock: meta search engine
🕵️ Tool to reverse-engineer Protocol Buffers with unknown definition
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
A concise, directive, specific, flexible, and free incident response plan template
Learn about a type of vulnerability that specifically targets machine learning models
A task scheduler built with Go and Vue.js that allows users to specify recurring jobs via a simple YAML configuration file. The scheduler reads job definitions, executes commands at specified times using cron expressions, and passes in environment variables for each job.
Validate the Strength of a Password in Go
- entropy
- strength
- character
- golang-package
Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
Multi-agent orchestration platform for Gemini CLI, Claude Code, Codex, and Qwen Code — 39 specialists, parallel subagents, persistent sessions, and built-in code review, debugging, security, SEO, accessibility, and compliance tools
Keyscope is a key and secret workflow (validation, invalidation, etc.) tool built in Rust
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
Discover internet-wide misconfigurations while drinking coffee
Set of tools for security testing of Internet of Things devices using specific network IoT protocols
HTTP web server and client, supports http1 and http2
Fast TUI for searching, inspecting, and queueing pacman/AUR packages.