Agentic-Bug-Hunter
awarexone/agentic-bug-hunterAI-powered bug bounty hunting toolkit that works with or without subscription.
ai-securityapi-security-testingcloud-security+8
awarexone/agentic-bug-hunterAI-powered bug bounty hunting toolkit that works with or without subscription.
splx-ai/agentic-radarA security scanner for your LLM agentic workflows
contrastsecurity/contrastSAST CLI for scanning Java, JavaScript, and .NET applications plus AWS Lambda functions, detecting code vulnerabilities and over-permissive IAM…
semgrep/semgrep-rulesStatic analysis rule pack for detecting security vulnerabilities, dangerous code patterns, and configuration issues across many languages; integrates…
limingxi6/cve-2020-9373-netgear-r6400解决网络安全漏洞
xoreaxeaxeax/schrodingers-toctouDetect compiler-invented memory loads that turn secure C into TOCTOU vulnerabilities. Includes automated source audits, Unicorn-based binary…
kc57/awesome-pentestA list of awesome penetration testing tools and resources.
airbus-cert/vbsparkleVBScript & VBA source-to-source deobfuscator with partial-evaluation
clearbluejar/ghidrecompPython Command-Line Ghidra Decompiler
joasasantos/osce3-complete-guideOSWE, OSEP, OSED, OSEE
sam00/cve-2026-56158-.net-framework-rce-poc-exploitGenerates five .NET deserialization payload formats for CVE-2026-56158, delivers them over HTTP/SOAP/JSON endpoints, includes mock server, scanner,…
flankerhqd/jebmcpMCP server plugin for JEB Pro that enables AI-assisted decompilation, method/field inspection, and automated renaming during APK reverse engineering.
pantheon-security/medusaAI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ hooks, permissions & skills before you clone — plus an…
robocoder/rips-scannerRIPS - A static source code analyser for vulnerabilities in PHP scripts
joasasantos/neurosploitAI-driven pentest harness with black-box, white-box, grey-box, host/cloud, and LLM red-team modes; validates findings with cross-model voting and…
minhhk68/cve-2026-13158Proof-of-concept exploit and technical advisory for an Admin+ arbitrary file upload to remote code execution vulnerability in Everest Toolkit…
vusec/ghostraceProof-of-concept and static analysis toolkit for finding speculative race condition (SCUAF) gadgets in Linux kernel. Includes 1200+ gadget dataset.
nccgroup/call_mapCurrent development for Call Map takes place at https://github.com/ajylee/call_map. Call Map is a tool for navigating Python call graphs.