flounder
adshao/flounderAutonomous white-hat security auditor for AI-driven code review, bug bounty research, exploit construction, and execution-grounded verification.
ai-securitycode-analysisdynamic-analysis-sandboxing+5
330
adshao/flounderAutonomous white-hat security auditor for AI-driven code review, bug bounty research, exploit construction, and execution-grounded verification.
agent-field/sec-afAI-native code security auditor on AgentField that proves exploitability with verdicts, traces, and actionable evidence.
mthamil107/db_audit_researchSelf-Defeating Audits: reproducible lab showing a low-privilege PostgreSQL role reversibly blinding a trigger-based auditor + poisoning attribution…
eh-amish/windows-defender-security-auditor-cve-2026-50656-
derv82/wifite2Rewrite of the popular wireless network auditor, "wifite"
kabiri-labs/sshfinderParallel SSH service discovery and security auditor that scans any port, validates SSH banners, and audits authentication methods, weak cryptography,…
rakosn1cek/oversightA lightweight security auditor and sandbox for shell scripts. Oversight combines a Static Analysis engine (Rust) with Dynamic Enforcement (Linux…
koblers/np-auditStatic security analysis for npm packages. Detects obfuscated code, malicious patterns, and known vulnerabilities before installation.
cloudflare/security-audit-skillA coding-agent skill for multi-phase security audits with independently verified, machine-readable findings
hackwarts12/escepcionPassive AD CS auditor detecting ESC1–ESC16 and Shadow Credentials via read-only LDAP/ACL/registry checks, with prioritized remediation and SIEM-ready…
perufitlife/directus-securityKeyless active-probe security auditor for Directus CMS. Proves public-role data exposure, user enumeration, unauthenticated version/schema leaks,…
aa022/cve-2026-23918-passive-auditPassive HTTP metadata auditor for CVE-2026-23918 exposure triage
sibersan/apache_audit_cve-2026-23918Python toolkit to audit Apache HTTP Server against CVE-2026-23918 (HTTP/2 double-free RCE) and 4 related CVEs. Passive scanner with ALPN verification…
signalapp/key-transparency-auditorContinuously fetches and cryptographically verifies key transparency log updates, maintains a condensed prefix and log tree view, and returns signed…
rodhnin/hephaestus-server-forgerserver security auditor scanning Apache, Nginx, and IIS configurations with AI-powered hardening guides and professional reporting.
rodhnin/asterion-network-minotaurNetwork and domain security auditor scanning Windows Active Directory, Linux systems, and network infrastructure with AI-powered hardening guides…
adversis/tailsnitchA security auditor for Tailscale configurations. Scans your tailnet for misconfigurations, overly permissive access controls, and security best…