OpenHunterAI
lumoslab-innovation/openhunteraiLocal-first AI red team for web, API, and LLM application security. Attacker-style reasoning, evidence-backed findings, and skills for AI coding…
ai-securityapi-securityapi-security-testing+9
330
lumoslab-innovation/openhunteraiLocal-first AI red team for web, API, and LLM application security. Attacker-style reasoning, evidence-backed findings, and skills for AI coding…
leebaird/engagement-mgrEngagement Manager is a web application for tracking offensive security engagements. It features a modern UI, built with Next.js, Prisma, and…
rvermeulen/apache-struts-cve-2017-9805Exploit for Apache Struts CVE-2017-9805, a remote code execution vulnerability in the REST plugin. Enables penetration testing and security…
ianxtianxt/cve-2019-15107Exploit script for CVE-2019-15107 targeting a remote code execution vulnerability in web applications. Designed for penetration testing and security…
xepor/xeporFlask-like routing framework for mitmproxy to intercept, modify, and spoof HTTP requests/responses. Enables rapid development of MITM scripts for…
coffinxp/img-payloadsCurated collection of image-based payloads for authorized red-team testing and security education, with HTML examples for generating or embedding web…
qeeqbox/social-analyzerAPI, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
uphiago/recon-skillsField-validated offensive security skill pack with 169 techniques for reconnaissance and penetration testing. Covers CORS, SSRF, subdomain takeover,…
talyx66/webfangWEBFANG, is my first CLI, a modular OSINT & Reconnaissance toolkit curated for Ethical Hackers and Red-Teamers. Sink fangs into web targets using a…
deepbluedynamics/grubcrawlerThe world's fastest agentic crawler. Reclaimed. Reinvented. Ready for war.
justicerage/freedomfightingA collection of scripts which may come in handy during your freedom fighting activities.
nox-project/nox-frameworkHigh-performance OSINT/CTI framework for automated identity pivoting and risk analysis across 120+ sources.
johenlastgen-jlg/cve-2025-6325_cve-2025-6327Python PoC validating CVE-2025-6325 unauthenticated privilege escalation and CVE-2025-6327 arbitrary file upload RCE in King Addons for Elementor <=…
aramosf/joomla_exploitsCurated collection of validated Joomla exploit artifacts with Docker lab environments. Includes RCE, SQLi, XSS, and privilege escalation scripts…
w01fh4cker/serein【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day…
yaklang/yakitAll-in-one penetration testing platform with MITM proxy, web fuzzer, reverse connection handler, and plugin system for automated security testing and…
wifiphisher/wifiphisherRogue Access Point framework for red team engagements and Wi-Fi security testing. Performs Evil Twin, KARMA, and Known Beacons attacks to achieve…
snailsploit/claude-redCurated library of 78 offensive security SKILL.md modules that prime Claude with expert red team methodology across web, AD, wireless, cloud, and…