#1LLM security, prompt injection, model extraction, adversarial AI, and AI red teaming tools.
Kitploit recommended
antropos17/aegisLocal, monitor-first observability for AI agents: processes, file activity, TCP endpoints and attribution evidence. Windows primary; macOS/Linux…
tnm/zclawYour personal AI assistant at all-in 888KiB (~35KB in app code). Running on an ESP32. GPIO, cron, custom tools, memory, and more.
concollmic/concollmicLLM-agent-powered concolic execution engine that instruments source code, summarizes path constraints in natural language, and generates test cases…
synacktiv/pike-agentExperimental Linux strace LLM agent
agnuxo1/openclaw-p2pDecentralized Autonomous Research Collective. Lean 4-verified, IPFS-backed, agent-native. Production paper: arXiv:2604.19792. Live at p2pclaw.com.
asaotomo/hx0-hawkeye一个轻量级浏览器抓包与安全分析扩展，在浏览器侧边栏中即可完成抓包、拦截、修改、重放、规则检测与AI辅助分析的完整工作流。（A lightweight browser extension for traffic capture and security analysis, enabling…
ottoyrocky/phantom-brainRed portatil de reconocimiento inteligente con IA offline
salespeak-ai/buyer-eval-skillB2B software vendor evaluation skill for Claude Code — domain-expert questions, vendor AI agent conversations, evidence-based scoring
chamsbouzaiene/ai-vuln-rediscovery-nginx-cve-2026-42945Reproducible AI-assisted vulnerability rediscovery of CVE-2026-42945 in nginx, including technical analysis, PoC trigger, and patch validation for…
scottalt/ai-email-threat-researchA cybersecurity research game measuring how humans detect AI-generated phishing emails. Built as a retro terminal experience.
safety-research/bloomAutomated behavioral evaluation framework for LLMs that generates diverse test scenarios to probe for sycophancy, bias, and other safety-relevant…
afshinm/zeroboxLightweight, cross-platform process sandboxing powered by OpenAI Codex's runtime. Sandbox any command with file, network, and credential controls.
deso-pk/make-trust-irrelevantplan-bound authorization architecture for governing privileged effects in untrusted computational agents.
jingkaihe/matchlockEphemeral microVM sandbox for AI agents with network allowlisting, secret injection via MITM proxy, and VM-level isolation. Boots in under a second,…
zakirkun/guardian-cliGuardian is a production-ready AI-powered penetration testing automation CLI tool that leverages Google Gemini and LangChain to orchestrate…
ak-cybe/cve-2025-68664-langgrinch-pocA testing framework to identify and demonstrate deserialization vulnerabilities in LangChain Core (<0.3.81). Educational use only
skavanagh/fish-live-in-treesFish Live In Trees
pannagkumaar/pentest-labModern cyber range with 50 hands-on challenges across web, API, cloud, AI, and blue-team security tracks. Features guided attack chains, transparent…
