Tools

pigyon/mcpwner

Model Context Protocol server for autonomous vulnerability discovery

google/oss-fuzz

OSS-Fuzz - continuous fuzzing for open source software.

tmylla/awesome-llm4cybersecurity

Curated systematic literature review of 756+ papers on LLM applications in cybersecurity, covering threat intelligence, vulnerability detection,…

b2r2-org/b2r2

B2R2 is a fully managed binary analysis framework written in F#. It provides a rich set of algorithms, functions, and tools for reverse engineering,…

ntop/ndpi

Open Source Deep Packet Inspection Software Toolkit

sqlancer/sqlancer

Automated testing to find logic and performance bugs in database systems

gadievron/raptor

Autonomous security research framework integrating static analysis, binary analysis, fuzzing, LLM-powered vulnerability validation, exploit…

provos/ironcurtain

A secure* runtime for autonomous AI agents. Policy from plain-English constitutions. (*https://ironcurtain.dev)

libssh/libssh-mirror

C library implementing the SSH protocol for secure remote access, authentication, and encrypted communication. Includes fuzzing support via OSS-Fuzz…

mda2av/http11probe

An open testing platform that probes HTTP/1.1 servers against RFC 9110/9112 requirements, smuggling vectors, and malformed input handling. Add your…

aflplusplus/libafl

Advanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ...

vavkamil/awesome-bugbounty-tools

Curated directory of bug bounty tools organized by category: reconnaissance, subdomain enumeration, port scanning, content discovery, exploitation,…

owasp/offat

Automated API security testing tool that generates tests from OpenAPI specs, fuzzes inputs, and checks for OWASP API Top 10 vulnerabilities including…

ainfosec/fissure

The RF and reverse engineering framework for everyone. Follow and ★ to show your support!

sjkim1127/reversecore_mcp

A security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research,…

google/syzkaller

Unsupervised coverage-guided kernel fuzzer for Linux and major OS kernels; automatically discovers security vulnerabilities through intelligent…

dwisiswant0/crlfuzz

A fast tool to scan CRLF vulnerability written in Go

4minx/cve-2026-14266

CVE-2026-14266 - XZ Heap Buffer Overflow PoC Generator for 7-Zip