#1LLM security, prompt injection, model extraction, adversarial AI, and AI red teaming tools.
Kitploit recommended
firelock-ai/kinSemantic graph-based version control for AI-written code. Tracks entities and relations instead of file diffs, enabling blast radius analysis, shadow…
1numak1/cve-2025-31337CVE-2025-31337 Security Advisory - Critical Buffer Overflow in AI Chatbot Framework
agentguard-ai/tealtigerPowerful protection for AI agents - Open-source security and cost tracking for AI applications
blessedrebus/krawlKrawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging…
cisco-ai-defense/defenseclawSecurity Governance for Agentic AI
dmitryflynn/netlogicNetLogic is an advanced network analysis and cybersecurity toolkit for traffic inspection, packet analysis, and threat detection
jricramc/aigateAI Prompt Secret Scanner: local proxy and Claude Code hook that blocks secrets before they reach AI APIs
scopeblind/scopeblind-gatewayEd25519 signed receipts + Cedar policies for AI agents. Finance mandate gate (Legate), proof packs, 3 IETF Internet-Drafts. npx protect-mcp
taleliyahu/ai-security-newsletterAI Security Newsletter - A monthly digest of AI security research, insights, reports, upcoming events, and tools & resources
commonguy25/authproof-sdkCryptographically signed delegation receipts for AI agents. Define exactly what an AI can and can't do — signed, verifiable, tamper-proof.
momenbasel/vulnhawkAI-powered SAST scanner that finds auth bypass, IDOR, and logic bugs Semgrep/CodeQL miss. Free GitHub Action. Supports Python, JS/TS, Go, PHP, Ruby.
sushegaad/claude-skills-governance-risk-and-complianceInstallable Claude Skills providing expert-level compliance guidance for 30+ frameworks including ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF,…
0xgh057r3c0n/cve-2025-3248Exploit for Langflow AI Remote Code Execution (Unauthenticated)
rohitberiwala/claude-code-mcp-injection-pocProfessional PoC for CVE-2025-59536 and related CVEs. Demonstrates an MCP Tool Confirmation Prompt Misrepresentation in Anthropic Claude_Code leading…
piyush-bhor/cve-2024-11394Technical Details and Exploit for CVE-2024-11394
zolderio/token-proxyA transparent PII redaction proxy for LLM API traffic. Sits between an application and an LLM provider (currently Anthropic), pseudonymizing…
quinnbast/malicious-mcpA Proof-of-concept repository showing how an untrusted MCP server can steal literally everything...
