Tools

usestrix/strix

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

keygraphhq/shannon

Shannon is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes…

cloudflare/security-audit-skill

A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

silentchainai/silentchain

AI-powered vulnerability scanner extension for Burp Suite with multi-provider support (Ollama, OpenAI, Claude, Gemini)

vigolium/vigolium

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision

tomnomnom/gf

A wrapper around grep, to help you grep for things

cerberusmrxi/cve-2026-44680-mikroorm-sql-injection-exploit-framework

PoC tool for CVE-2026-44680 affecting MikroORM ≤7.0.13. Exploits JSON path injection to extract database contents via UNION-based attacks. Features…

momenbasel/vulnhawk

AI-powered SAST scanner that finds auth bypass, IDOR, and logic bugs Semgrep/CodeQL miss. Free GitHub Action. Supports Python, JS/TS, Go, PHP, Ruby.

ananay/wp2shell-lab

Validation target: minimal WordPress core slice reproducing the wp2shell (CVE-2026-63030 + CVE-2026-60137) REST-to-SQLi chain

learner202649/cve-2026-47102-poc

The code for personally reproducing the corresponding vulnerability

jricramc/aigate

AI Prompt Secret Scanner: local proxy and Claude Code hook that blocks secrets before they reach AI APIs

hupe1980/cve-2021-3129

Laravel debug mode - Remote Code Execution (RCE)

0xbigshaq/apatchy

Fuzzing Framework for Modules in Apache HTTPD Server

skysliently/cve-2022-22947-pb-ai

一个由AI生成的漏洞验证应用

shoucheng3/x-stream__xstream_cve-2021-21345_1-4-15

Java XML serialization library with a focus on CVE-2021-21345 exploit analysis and deserialization vulnerability testing for web applications.

traceforce/mcp-xray

Unified security scanner for MCP servers with config, pentest, and repo-scan modes. Generates SARIF reports for CI/CD integration, detects secrets,…

jpiechowka/jenkins-cve-2016-0792

Exploit for Jenkins serialization vulnerability - CVE-2016-0792

owasp/agent-security-regression-harness

Executable security regression testing for agentic applications and MCP-integrated systems.