ultrafuzz
monad-developers/ultrafuzzEnd-to-end agentic smart contract fuzzing and threat hunting
ai-securitydefensive-toolsfuzzing+5
1081 day ago
monad-developers/ultrafuzzEnd-to-end agentic smart contract fuzzing and threat hunting
ammarion/waf-detector🛡️ High-performance WAF & CDN detection tool. Identify protection layers (Cloudflare, Akamai, AWS, Fastly, and more), run effectiveness and…
0xmaximus/galaxy-bugbounty-checklistTips and Tutorials for Bug Bounty and also Penetration Tests.
kabiri-labs/rcekitRCE detection and confirmation toolkit that tests URLs or captured HTTP requests for command injection, SSTI, blind and OOB paths, returning tiered…
breachsimrange/redteamsimmerWeb-based adversary emulation platform that orchestrates Atomic Red Team tests across Windows endpoints via Go agents, with MITRE ATT&CK mapping, APT…
jonaslejon/malicious-pdfGenerate malicious PDF test files for penetration testing, bug bounty hunting, and red teaming. Tests SSRF, XSS, XXE, NTLM credential theft, and data…
coreruleset/ftwYAML-driven framework for testing Web Application Firewall (WAF) rules using OWASP Core Rule Set baselines. Automates regression detection and…
facebookincubator/ttpforgeThe TTPForge is a Cybersecurity Framework for developing, automating, and executing attacker Tactics, Techniques, and Procedures (TTPs).
kolmteistov/gobalance-patchSecurity patch and proof-of-concept for GoBalance onion load balancer, covering master key recovery via blindedSign and forged descriptor acceptance,…
bishopfox/cloudfoxAutomating situational awareness for cloud penetration tests.
voidsec/cve-2020-1472Exploit Code for CVE-2020-1472 aka Zerologon
gitlab-security-oss/tldrSigma-based detection rules, log queries, atomic tests, and response procedures for monitoring and threat hunting in GitLab environments.
akto-api-security/aktoOpen-source API security platform for continuous API discovery, vulnerability testing, and runtime threat detection. Integrates with CI/CD pipelines…
open-policy-agent/conftestWrite tests against structured configuration data using the Open Policy Agent Rego query language
santandersecurityresearch/corsair_scanAutomated CORS misconfiguration scanner that tests Origin header injection, wildcard reflection, and credential leakage across web applications and…
elemental-attack/elementalElemental - An ATT&CK Threat Library
iamavu/zairoScans code diffs with context to build an impact graph and uses LLMs to find vulnerabilities, supporting multi-repo scans and CI gating with SARIF…
gmh5225/aggressor-aggregatorA helper script for consolidating Aggressor and BOF repositories into a single CNA for Cobalt Strike.