Havuz

A guide for building an AI agent that alerts you to new vulnerabilities, active exploitation and malicious packages. Includes Malaysian sour

Every hack, exploit and breach, live: new vulnerabilities, active exploits and breaches on one globe, with sources and one-click fixes.

AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP inte

Local security intelligence for CVE triage - 40 data sources and 41 tools, risk scores and an MCP server for AI agents, all in native Rust.

基于 ARTEX 的 AI 自主渗透测试系统，支持多 Agent 协作、资产探索与漏洞管理，提供本地部署面板。

AI-driven malware analysis framework with 30+ integrated tools, web REPL, and MCP server

Local-first credential manager & validator for red teams / pentest：致力于 ALL IN ONE 的本地凭据管理与验证平台 keyrealm（凭域）。 允许将红队渗透测试中获取的散落在各处的 API Key、云厂商

An automated way to discover practical, hands on penetration testing projects using Claude, with structured learning roadmaps, relevant secu

AI 自主渗透测试 · 红队作战平台 | 多 Agent 自主推进 · 漏洞情报运营 · 后渗透与 C2 | LLM 三通道轮询 | 全程证据留痕 | 原百度攻防赛冠军项目独立演进版

Self-hosted open source security validation workspace: approved scope, evidence and independent retests

Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish

A structured, versioned archive of adversarial prompt engineering techniques against Large Language Models — for AI safety research, red-tea

JsOwl —— Go 编写的 Web 安全信息收集利器。集 JavaScript 信息收集、API 端点提取、敏感信息扫描、攻击面梳理 于一体，同时提供 CLI 工具与 Go 库。内置 direct / browser / auto 三种采集模式，兼容 HaE 规则，支持登录态

MCP server for CVE intelligence: 16 read-only tools for CVE records, CISA KEV, EPSS history, exploits, fix guidance as sources state it, ver

AI Web Solutions and Python Automation Projects by Krish Sharma 2026

An open database of real-world AI agent incidents.

Grepleaks — your AI pentest environment. An AI pentest agent that lives in your terminal.

RAM efficient terminal agent harness for coding, cybersecurity, and automation.

Open-source local AI Agent desktop app for authorized security assessment — Electron + Mastra-powered runtime, visual pentest workflow, Kali

Dark-GPT: The ultimate unrestricted AI assistant for cybersecurity research by M4TH4CK3R

Official VirusTotal MCP server for AI agents: threat intelligence, file analysis, and recovery through VTAI.

Rust-native, multi-session headless IDA Pro MCP server with isolated workers and stdio or Streamable HTTP transports.

基于多智能体架构与自主决策机制，配合大语言模型的理解能力，输入自然语言指令，AI 自动完成从目标侦察到漏洞验证的完整渗透测试流程。

Install, run and verify OSINT tools from GitHub automatically, on any OS

0, tarayıcı, terminal ve MCP üzerinden güvenlik iş akışları çalıştırıp bulguları iş etkisine göre önceliklendiren açık kaynak bir güvenlik platformudur.

Neden yükseliyor · 46 günde 492 yıldız ve son 28 günde 677 commit dikkat çekici bir ivmeye işaret ediyor; YC desteği ve browser, CLI, MCP birleşimi de görünürlüğü artırabilir. Ancak commitlerin tek farklı yazardan gelmesi, hareketliliğin geniş topluluk katkısı anlamına gelmediğini gösteriyor.

BGNexa AI — Evidence intelligence for cybersecurity, privacy and regulatory readiness.

Behavioral-discipline skill turning an AI agent into a methodical, non-robotic bug-bounty & pentest hunter - 42 always-on rules: scope, cove

🥷 Give your codebase a black belt. Local code intelligence, security analysis, and compiler-backed facts for humans and AI.

🛡️ Turnkey cybersecurity lab for Hermes Agent — 397 CVE-driven skills, 152 tools, 28 frameworks (MITRE ATT&CK, MISP, CVSS, EPSS, OWASP, NIST

AI Agent + 抓包融合安全测试工具 | 自然语言驱动自主渗透测试 | ReAct 编排引擎 | Tauri + FastAPI

Run cyber-AI agents against real missions in isolated environments. Record everything as OpenTelemetry evidence. Grade the evidence, not the

AI red-team platform. Autonomous LLM agents run a penetration test end to end inside a Kali container and write the report. LangGraph plan/a

28 OSINT Agent Skills that turn Cursor, Claude & AI coding agents into a full open-source intelligence platform — reconnaissance, attributio

High-assurance, artifact-agnostic prompt for authorized security labs, exploit-chain research, PoC validation, and evidence-led reporting.

Autonomous multi-agent pentest framework — plans, exploits, verifies (proof-required), CVSS-scores and writes client-ready reports. 104/104

reconnaissance for agent attack surfaces

Open-source asset inventory — turn scattered, contradictory tool data into one reliable inventory, then chat with it using the LLM of your c

Codex Security, kod depolarındaki güvenlik açıklarını taramak, doğrulamak ve düzeltme önerileri sunmak için CLI ve TypeScript SDK sağlar.

Neden yükseliyor · 76 günlük yaşına karşın yüksek yıldız sayısı ve son 28 gündeki 188 commit ile 20 farklı yazar, belirgin ilgi ve aktif geliştirme gösteriyor; OpenAI markası da görünürlüğüne katkıda bulunabilir. Bu veriler tek başına tarama kalitesini veya üretim ortamında benimsenmeyi kanıtlamaz.

LLM-first deception framework: "The honeypot that talks back!™"

DeepSec — AI Security Offense & Defense Platform. Shield audits AI-generated code for hallucinated packages, missing safeguards & AI pattern

Supervised, Hermes-native penetration testing profile with 35 routed playbooks, guarded target execution, persistent engagement state, evide

AI Powered Reverse Engineering Tool

AI-powered log diagnostics engine that analyzes server logs, stack traces, and infrastructure failures to identify root causes and recommend

A privacy-first, fail-closed AI pentest conductor and autonomous Red Team platform

Empowers the AI to perform penetration testing, vulnerability assessment, reconnaissance, and security reporting — all through natural langu

Rational engineering system prompt for Codex and LLMs — focused on accuracy, software engineering, AI, security research, bug bounty, and re

AI-orchestrated, Kali-native pentesting lab: an MCP tool-server with scope/VPN/rate/audit enforced in code, independent finding verification

Declaratively deploy & manage multiple isolated AI agents on a single NixOS machine — each with its own secrets, skills, and personality.

Static security scanner for AI agent skill packages. Detects malicious SKILL.md files and bundled scripts before they run.

LLM-native static vulnerability detection: point it at a repo and get a reviewable vuln report, the way a human auditor would.