secbox
yv1ing/secboxConducting cybersecurity testing using the pi agent in a pre-built sandbox environment.
network-mappingvulnerability-analysismobile-app-pentesting+9
yv1ing/secboxConducting cybersecurity testing using the pi agent in a pre-built sandbox environment.
affolter-engineering/xssearchRust-based XSS scanner with context-aware payload selection, WAF detection and bypass, crawling, blind XSS callbacks, and static DOM sink analysis.
affolter-engineering/snmpenSNMP enumeration tool that queries SNMPv1/v2c hosts to extract system information, TCP connections, and write access for penetration testing and…
affolter-engineering/mqattackRust CLI for MQTT penetration testing: subscribe/publish, broker fingerprinting, ACL probing, topic enumeration, credential brute-force, and Last…
joda32/aditActive Directory recon and read-only security audit over ADWS (net.tcp/9389), in Go
kr0no/bloodhound-shellAn interactive command-line shell for BloodHound API.
roccoammon/active-directory-health-checkPowerShell GUI tool that runs 54 best-practice health and security checks against Active Directory, flagging Kerberoasting, DCSync, delegation and…
rorywag/hayabusa-bulk-runnerBulk-run Hayabusa across a folder of triage collections, one run per host, with per-host reports and a cross-host triage dashboard
ko0ler/homelabGNS3 home lab documenting a segmented network with Cisco ASAv firewall, L3 core, DMZ, and an Active Directory domain for practicing networking,…
ambitsecurity/jshoundFind every API request a web app makes, from the JavaScript it ships: method, URL, body, headers and GraphQL operations. One command.
ripits-sec/couchpotatoWindows privilege escalation tool that patches ETW and AMSI and uses indirect syscalls to abuse SeImpersonatePrivilege, escalating service accounts…
joda32/yowieFinds the SaaS services an organisation subscribes to, using only externally observable data. Built for shadow IT discovery.
nawaralseelawi/pvbrf-idSimulation code and results for a private, verifiable, Byzantine-robust federated intrusion detection protocol using secret sharing, Merkle audits…
cosmosyi/autocontrol-arenaAutomated framework for frontier AI safety evaluation that synthesizes executable, pressure-rich test environments to uncover latent risks in…
yxf203/defense-as-skillRuntime guard skill that detects and blocks malicious skill-induced attacks in skill-augmented agents, with an MCTS loop that evolves the guard…
yukibtc/redknifeA Swiss Army knife for offensive security.
bittersecurity/decepticonAutonomous LLM red team agent that plans and executes full attack chains—recon, exploitation, privilege escalation, lateral movement and C2—inside an…
perplexityai/numbatVisibility into AI agent activity on endpoints, with on-device detection, optional pre-action blocking, and forensic reconstruction.