gmh5225/awesome-llvm-securityCurated collection of LLVM security resources covering binary lifting, code obfuscation, static analysis, symbolic execution, sanitizers, and…
gmh5225/awesome-game-securityCurated index of game security research: anti-cheat internals, DMA attacks, reverse engineering, kernel/mobile protections, and graphics API hooking…
daijro/camoufoxOpen-source anti-detect Firefox fork for undetectable web scraping and AI agent automation. Injects realistic browser fingerprints, spoofs…
azmisyahrul/prismsecSecure, modular MCP server wrapping nmap, nuclei, gobuster, subfinder, httpx, nikto, sqlmap for AI-powered pentesting
wattocyber/agentic-dm-gatewaySecurity control plane for LLM agents: allowlists, owner kill switch, PIN sessions, rate limits, prompt-injection detection, and output scrubbing to…
darnellwashingtonjr94-art/sandb0x-xtract0rAutomated cross-platform sandbox that detonates suspicious files in isolated VMs/emulators, captures network and memory artifacts, and creates LLM…
wattocyber/detection-defense-libraryDetection-engineering reference mapping Windows, cloud, container, identity, and ICS attack classes to Sigma rules, trust-boundary models, BYOVD…
wattocyber/custom-oscp-toolingOSCP-focused toolkit for read-only network, SMB, AD, DNS, web, and database enumeration; privesc scanning, hash identification, and…
studiomeyer-io/mcp-stdio-shellguardDefense-in-depth bundle for MCP stdio servers: drop-in guardExec/guardSpawn wrappers, AST audit CLI, reference MCP server. Closes the Ox-Security…
wattocyber/oscp-notes-2026OSCP field notebook by Samson Laird: merged technique vault, numbered notes (MIT)
wattocyber/cantinaOSCP-legal network recon orchestrator for port discovery, service classification, and enum-only plugin dispatch across HTTP, SMB, FTP, SNMP, SSH, and…
shenril/sitadelWeb Application Security Scanner
z4nzu/hackingtoolAll-in-one penetration testing toolkit aggregating 185+ tools across 20 categories including information gathering, web & wireless attacks, phishing,…
bcapptain/dockernymousA script used to create a whonix like gateway/workstation environment with docker containers.
squidsec/bloodbashOffline AD/Entra attack-path analyzer for SharpHound/AzureHound JSON. Surfaces prioritized privilege escalation, credential, and misconfiguration…
joelgmsec/fakedatagenGenerates fully valid fake identities in Spanish format, including names, emails, bank details, and extended info, with optional zip compression and…
spyboy-productions/r4venTrack the GPS location of the user's smartphone or PC and capture a picture of the target, along with IP and device information.
zaydmulani09/sentrymcpA static + runtime security scanner for MCP (Model Context Protocol) servers
gmh5225/asm-obfuscatorObfuscates x86-64 assembly with instruction injection, junk code, constant obfuscation, and runtime decryption to hinder reverse engineering and…
z4nzu/hackingtoolAll-in-one penetration testing toolkit aggregating 185+ tools across 20 categories including information gathering, web & wireless attacks, phishing,…
bcapptain/dockernymousA script used to create a whonix like gateway/workstation environment with docker containers.
squidsec/bloodbashOffline AD/Entra attack-path analyzer for SharpHound/AzureHound JSON. Surfaces prioritized privilege escalation, credential, and misconfiguration…
joelgmsec/fakedatagenGenerates fully valid fake identities in Spanish format, including names, emails, bank details, and extended info, with optional zip compression and…
spyboy-productions/r4venTrack the GPS location of the user's smartphone or PC and capture a picture of the target, along with IP and device information.
zaydmulani09/sentrymcpA static + runtime security scanner for MCP (Model Context Protocol) servers
gmh5225/asm-obfuscatorObfuscates x86-64 assembly with instruction injection, junk code, constant obfuscation, and runtime decryption to hinder reverse engineering and…
