New release9 minutes ago
strix v1.7.1
usestrix/strixOpen-source AI penetration testing tool to find and fix your app’s vulnerabilities.
OSINT (Open Source Intelligence)ReconnaissanceVulnerability Scanners+9
Featured
Latest Updates
View all updatesusestrix/strix
New tool2h 26m ago
hopline
forensicworks/hoplineBitcoin investigation tools in your browser: follow the money, label wallets, flag patterns with reasons and write a verifiable report. Nothing to…
OSINT (Open Source Intelligence)Information GatheringDigital Forensics+4
New tool3h 27m ago
usb-rea
emirmrkaljevic/usb-reaReverse Engineer any USB gadget: capture vendor-app traffic, infer the protocol with evidence, generate an open Python/libusb driver. CLI + MCP…
Packet Sniffing & AnalysisReverse EngineeringScripting & Automation+4
New tool4h 28m ago
coffee_explorer
iartorias/coffee_explorerThe familiar PE editor, redesigned with a Visual Studio aesthetic, high DPI support and more.
General Purpose UtilitiesStatic AnalysisHash Analysis+6
New tool5h 28m ago
paranoia
altumptic/paranoiaOpen reverse engineering — PE/ELF/Mach-O, x86/x64/AArch64, graphs, pseudocode. Rust engine, no network. Desktop · CLI · browser.
Static AnalysisCode AnalysisReverse Engineering+7
New tool6h 28m ago
SSH-Snake
megamansec/ssh-snakeFileless, self-propagating Bash script that recursively discovers SSH private keys and reachable hosts, then traverses the network via SSH to map…
Privilege EscalationReconnaissanceNetwork Mapping+7
New tool8h 29m ago
mapta
arthurgervais/maptaMulti-agent LLM system that autonomously assesses web application security, orchestrating tool-grounded execution and validating exploits end to end.
Vulnerability AnalysisExploitationScripting & Automation+5
New tool9h 29m ago
hackingBuddyGPT
ipa-lab/hackingbuddygptHelping Ethical Hackers use LLMs in 50 Lines of Code or less..
Penetration Testing FrameworksPrivilege EscalationExploit Frameworks+9
New tool10h 30m ago
BugTraceAI
bugtraceai/bugtraceaiOpen-source, self-hosted web pentesting suite with agentic scanning, analyst tools, API testing, model checkpoints and MCP integrations.
ReconnaissanceWeb Vulnerability ScannersVulnerability Analysis+7
New tool11h 30m ago
AutoPentester
yasodginige/autopentesterThis repository contains a tool that can be used for automated pentesting tasks.
Penetration Testing FrameworksReconnaissanceVulnerability Analysis+5
New tool12h 31m ago
LDAP-Monitoring-Watchdog
megamansec/ldap-monitoring-watchdogLDAP Watchdog: A real-time linux-compatible LDAP monitoring tool for detecting directory changes, providing visibility into additions, modifications,…
Authentication & AuthorizationDefensive ToolsIdentity Management+4
New tool13h 31m ago
scan-results-bridge
completetech-security/scan-results-bridgeOffline security-report converter to SARIF 2.1.0 and NDJSON with schema validation and preserved evidence provenance. No scanning or uploads.
Defensive ToolsStatic AnalysisVulnerability Analysis+4
Latest Exploits
View all exploitsOpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket connection without...
Evidence Aug 25, 2026
1 Repository evidence · Evidence observed: Oct 18, 2026
- CVSS
- 8.8High
- EPSS
- 32.4%Moderate
- Exploits
- 8
EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC)
Evidence Aug 19, 2026
1 Repository evidence · Evidence observed: Sep 26, 2026
- CVSS
- 9.8High
- EPSS
- 58.4%High
- Exploits
- 3
MindsDB has Path Traversal in /api/files Leading to Remote Code Execution
Evidence May 4, 2026
1 Repository evidence · Evidence observed: Sep 26, 2026
- CVSS
- 8.8High
- EPSS
- 11.0%Moderate
- Exploits
- 3
