1.KeygraphHQ / shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Ranked by Attention Score: stars gained over the last 90 complete days
6 repositories by Attention Score · Aug 5, 2026 – Nov 2, 2026 (UTC)
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
The AI Agent for Cyber Security.
Open detection-rule standard for AI agent security threats — like Sigma, but for AI agents. Executable, testable rules for prompt injection, tool poisoning, context exfiltration and MCP attacks. Merged into open-source projects at Microsoft, Cisco, Gen Digital, MISP and FINOS. MIT-licensed.
Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF
A collection of higher-level reusable cdk constructs