#1LLM security, prompt injection, model extraction, adversarial AI, and AI red teaming tools.
Kitploit recommended
destawell/gemini-2.5-pro-nf-tables-red-teamingGemini 2.5 Pro nf_tables Red Teaming Case Study (CVE-2023-32233) — LLM Safety Alignment & Responsible Disclosure
destawell/gemini-2.5-pro-nf-tables-red-teaminA technical case study and timeline dataset documenting Google Gemini 2.5 Pro's safety alignment policies, guardrails, and refusal behavior evolution…
farenhytee/database-sentinelClaude Skill that audits your projects for RLS misconfigurations, exposed keys, auth bypasses, and storage vulnerabilities. 27 anti-patterns sourced…
rootdirective-sec/cve-2026-33626-labDocker Compose lab reproducing CVE-2026-33626 SSRF in LMDeploy's vision-language image loader. Compares vulnerable (0.12.0) and patched (0.12.3)…
shinthink/cve-2026-27966Pre-auth RCE scanner for Langflow < 1.8.0 — Route Injection + Vertex Injection → Code Execution (CVSS 9.8)
imthecopilotnow/cve-2025-492025Detailed security advisory for CVE-2025-492025, documenting a UI misrepresentation vulnerability in Copilot AI that injects unintended hyperlinks…
sooryathejas/metatronAI-powered penetration testing assistant using local LLM on linux (Parrot OS)
aarocy/recon-scanRecon-Scan: open‑source passive reconnaissance with AI‑powered security analysis. Zero‑touch, developer‑first, and privacy‑focused.
owasp/secure-agent-playbookOWASP Secure Agent Playbook Project
0ca/boxpwnrA modular framework for benchmarking LLMs and agentic strategies on security challenges across HackTheBox, TryHackMe, PortSwigger Labs, Cybench,…
synlace/ferretThe collaborative web app pentest suite
gouravnagar-infosec/ai-kill-chainA defender-side extension of the Lockheed Martin Cyber Kill Chain for LLM and agentic AI threats. Adds a model supply chain stage and splits…
shenli/distributed-system-testingAI-agent skills for distributed-systems testing
facebook/mcpguard-dynamicKernel-level eBPF sandbox for securing LLM agent tool calls made through the Model Context Protocol (MCP)
owasp/pwnzzaiHands-on AI security learning platform with intentionally vulnerable LLM applications. Explore OWASP Top 10 for LLMs through interactive pizza shop…
usestrix/strixOpen-source AI penetration testing tool to find and fix your app’s vulnerabilities.
samugit83/redamonAn AI-powered agentic red team framework that automates offensive security operations, from reconnaissance to exploitation to post-exploitation, with…
