OWASP-WSTG-Rag
zilbonn/owasp-wstg-ragOWASP Web Security Testing Guide RAG system with ChromaDB, MCP for Claude Code
ai-securityapi-security-testingauthentication+8
22
zilbonn/owasp-wstg-ragOWASP Web Security Testing Guide RAG system with ChromaDB, MCP for Claude Code
maximilianfeix/hexveroKnow what changed inside your Electron release: diff two builds for IPC, preload, windows, fuses and hosts, with file:line. CLI, CI gate, MCP server.
ericmtzmtz/pwnproxyAn open, local-first security testing platform for pentesters, AI agents, CI/CD pipelines, and teams.
pwnhyo/t-mapTrajectory-aware evolutionary search framework for red-teaming LLM agents over MCP servers, generating adversarial prompts to map vulnerability…
welfordian/mitm-proxyGo-based MITM HTTP/HTTPS proxy with HTTP/2 and HTTP/1.1 interception, local CA/per-host cert generation, CONNECT/WebSocket tunneling, disk caching,…
qbnasasn/google-tensor-chipsGoogle Tensor Cracks
jinxhy/awesome-moai-securityCurated reading list and taxonomy of attack and defense research for mobile on-device AI systems, covering adversarial, backdoor, model stealing, and…
zhengxr930/malevalOfficial code for the ISSTA 2026 paper: Is "Knowing It’s Malicious" Enough? Evaluating LLMs for Fine-Grained Malware Behavior Auditing
saiteja-erukude/cve-2026-47117-openmed-rceOpenMed < 1.5.2 unauthenticated RCE via PII privacy-filter model loading and trust_remote_code=True
vighnesh91/securiscanStandard-library Python security triage engine that scans web apps, APIs, LLMs, and mobile packages via passive header inspection, active canary…
coactionbrittlemaidenhair51/coactionbrittlemaidenhair51.github.ioExplore and validate CVE-2026-42978 PoC with an integrated AI security tool, multi-protocol terminal, and autonomous agent suite for Windows Push…
binzhwang/actguardPre-execution action-auditing defense that detects and masks indirect prompt injection in tool-using LLM agents using embedding retrieval and…
owasp/agentic-vulnerability-discovery-and-validation-harnessAgentic harness that automates vulnerability discovery and validation, orchestrating AI-driven analysis workflows to confirm exploitable findings.
vighnesh91/-logicsentry-aiOffline SAST/DAST triage engine that parses source code and replays HAR traffic to detect business-logic flaws, BOLA, race conditions, and privilege…
boreas37/cve-2025-62593-pocPoC for CVE-2025-62593: unauthenticated RCE in Ray (CISA KEV). Stdlib-only Python.
grassplatypus/cve-2026-45033-classCVE-2026-45033 PoC for Claude Code, not Github Copilot. Worked for Haiku 4.5.
gmh5225/aisa-scannerAISA-Scanner is an AI-powered autonomous vulnerability scanner that maps CVEs to metasploit exploits, MITRE, CEH, and SANS, delivering intelligent,…
wattocyber/masqLive recon and posture auditing for AI agent infrastructure: scans MCP configs, session logs, and APIs for secrets, poisoned catalogs, and CoT leaks.