Tools

jonaslejon/malicious-pdf

Generate malicious PDF test files for penetration testing, bug bounty hunting, and red teaming. Tests SSRF, XSS, XXE, NTLM credential theft, and data…

eth0izzle/shhgit

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.

sheeki03/tirith

Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and…

luckypipewrench/pipelock

Open-source AI agent firewall that scans HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injection, emitting verifiable…

yunuscadirci/callstranger

Vulnerability checker for Callstranger (CVE-2020-12695)

mazen160/shennina

Automating Host Exploitation with AI

getagentseal/agentseal

Security toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor for supply chain attacks, test prompt injection…

storenth/lazyrecon

Wicked sick v2.0 script is intended to automate your reconnaissance process in an organized fashion.

brittonhayes/pillager

Pillage filesystems for sensitive information with Go 🔍

sobri3195/pegasus-neo

PEGASUS-NEO is a comprehensive penetration testing framework designed for security professionals and ethical hackers. It combines multiple security…

papermtn/gitlab-watchman

Finding exposed secrets and personal data in GitLab

detexploit/detexploit

OSS Vulnerability Scanner for Windows Platform

arsbr/veritensor

The Anti-Virus for AI Artifacts & RAG Firewall. A static analysis tool scanning Models and Notebooks for RCE, Datasets and RAG docs for Data…

citcheese/odbparser

OSINT tool to search, parse and dump only the open Elasticsearch and MongoDB directories that have the data you care about exposing

yehgdotnet/s3scanner

Scan for open S3 buckets and dump

crussella0129/tricorne

a Fedora remix focused on pentesting and purple hat tooling