
summit
Open-source web security testing platform: proxy, scanner and fuzzer in one CLI. By Pennacle Security.

Open-source web security testing platform: proxy, scanner and fuzzer in one CLI. By Pennacle Security.

Linux privesc enumerator that confirms exploitability and gives you the exact root shell command - no GTFOBins searching. MCP server + AI-agent…

Hands-on SOC lab: AWS mini-SOC with CloudTrail/GuardDuty, a Python CloudTrail IOC analyzer, phishing header forensics, ELF binary triage, and agent…

AI-powered modular Active Directory red-team framework for authorized penetration testing, AD enumeration, attack-path analysis, Kerberos/ADCS…

Scans PostgreSQL databases and Jira issues for PII using regex, NER/ML, and optional self-hosted LLM detection, with redacted reports and audit…

OWASP Incubator project: detects credentials exposed in browser-delivered content (JavaScript, config responses, live traffic).

MCP server that lets AI assistants drive a self-hosted Sn1per install, running scoped, audited scans and returning findings, ports, subdomains and…

Offline CISA KEV snapshot comparison for field-level change review. Free prototype, not a security assessment. AI-assisted development.

Command-line multi-vector DDoS test tool with 129 volumetric, protocol, application, and amplification attack vectors for authorized resilience…

Physical access red team live ISO built on Arch Linux

Windows Linux DMA、Dump 、Direct、inject 内存读取、写入工具

Unix endpoint detection and response solution using kernel-level mechanisms to detect anomalies and malware attacks in real time.

AI-based malicious code detection and obfuscation system with microservices for detection, packing, and code confusion, plus user and admin services.

Curated collection of 961 malware families (1.36 GB) in password-protected ZIP archives, organized by family and type for analysis and research.

A program written in C++ for remotely dumping manual mapped modules.

Did you ever just want it to do everything? 148 POWERFUL Infosec/Admin tools on a single MCP server.

Bash 403/401 access bypass tester that probes a URL with header spoofing, method tampering, path normalization, and encoding techniques, returning a…

Know what changed inside your Electron release: diff two builds for IPC, preload, windows, fuses and hosts, with file:line. CLI, CI gate, MCP server.