
WinFlesher
Automated attack surface assessment framework for Active Directory and local infrastructures, correlating vulnerabilities with attack paths to domain…

Automated attack surface assessment framework for Active Directory and local infrastructures, correlating vulnerabilities with attack paths to domain…

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.…

Wiki to collect Red Team infrastructure hardening resources

Real-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…

Simple PHP reverse shell script for establishing remote command execution on target systems. Ideal for penetration testing and security assessments.

Deep learning framework for object detection, segmentation, classification, pose estimation, and tracking using pre-trained YOLO models and…


Open-source web application security scanner that identifies and exploits 200+ vulnerabilities including XSS, SQL injection, and OS commanding.…

Automated attack surface assessment framework for Active Directory and local infrastructures, correlating vulnerabilities with attack paths to domain…

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.…

Wiki to collect Red Team infrastructure hardening resources

Real-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…

Simple PHP reverse shell script for establishing remote command execution on target systems. Ideal for penetration testing and security assessments.

Deep learning framework for object detection, segmentation, classification, pose estimation, and tracking using pre-trained YOLO models and…


Open-source web application security scanner that identifies and exploits 200+ vulnerabilities including XSS, SQL injection, and OS commanding.…


Automated YARA rule generation from the Cert Central compromised certificate database.

Multi-protocol cryptographic analyzer auditing TLS, SSL, SSH, IKE, DNSSEC, and HTTP security headers. Detects 400+ cipher suites, generates JA3/HASSH…

High-performance email content filter framework with integrated virus scanning and spam detection, supporting multiple backends and flexible policy…

CLI tool for inspecting and managing services listening on localhost ports

Lightweight, container-free sandbox for running commands with network and filesystem restrictions

Local-first password manager with direct device-to-device sync

Security Scanner for Agent Skills

Rust port of @masterking32's MasterHttpRelayVPN — all credit to @masterking32 for the original idea and Python implementation. Free DPI bypass via a…

A HTTP credential proxy and vault for AI agents like Claude Code, OpenClaw, Hermes, custom agents + harnesses, and more.

Public SDK for Intelligence X

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm:…

Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.