Havuz

AiSOC, güvenlik telemetrisini birleştirip tehditleri tespit eden ve AI agent ile incelerken karar adımlarını kayda alan, self-hosted bir SOC platformudur.

Neden yükseliyor · 149 günlük yaşına rağmen 2.370 yıldız ve son 28 günde 247 commit dikkat çekiyor; self-hosted kurulum, yerel modelle API key gerektirmeyen başlangıç ve çalışır demo akışı projeyi denemeyi kolaylaştırıyor. Commit sayısı yüksek olsa da katkı 3 farklı yazarla sınırlı; yükselişin nedenini doğrudan doğrulayacak benimsenme verisi yok.

A professional, high-fidelity de-anonymization and vulnerability diagnostic framework. Features a zero-coupling modular architecture for bro

Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish

Every hack, exploit and breach, live: new vulnerabilities, active exploits and breaches on one globe, with sources and one-click fixes.

AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP inte

Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8

0, tarayıcı, terminal ve MCP üzerinden güvenlik iş akışları çalıştırıp bulguları iş etkisine göre önceliklendiren açık kaynak bir güvenlik platformudur.

Neden yükseliyor · 46 günde 492 yıldız ve son 28 günde 677 commit dikkat çekici bir ivmeye işaret ediyor; YC desteği ve browser, CLI, MCP birleşimi de görünürlüğü artırabilir. Ancak commitlerin tek farklı yazardan gelmesi, hareketliliğin geniş topluluk katkısı anlamına gelmediğini gösteriyor.

Codex Security, kod depolarındaki güvenlik açıklarını taramak, doğrulamak ve düzeltme önerileri sunmak için CLI ve TypeScript SDK sağlar.

Neden yükseliyor · 76 günlük yaşına karşın yüksek yıldız sayısı ve son 28 gündeki 188 commit ile 20 farklı yazar, belirgin ilgi ve aktif geliştirme gösteriyor; OpenAI markası da görünürlüğüne katkıda bulunabilir. Bu veriler tek başına tarama kalitesini veya üretim ortamında benimsenmeyi kanıtlamaz.

AI 自主渗透测试 · 红队作战平台 | 多 Agent 自主推进 · 漏洞情报运营 · 后渗透与 C2 | LLM 三通道轮询 | 全程证据留痕 | 原百度攻防赛冠军项目独立演进版

pentest-ai-agents, Claude Code içinde yetkili penetration testing iş akışlarına yönelik uzmanlaşmış subagent’lar sunan bir koleksiyondur.

Neden yükseliyor · 188 günde 2301 yıldız, Claude Code için doğrudan kurulabilen 50 uzman agent ve geniş güvenlik kapsamına yönelik belirgin ilgi gösteriyor. Bunun benimsenme veya çıktı kalitesi kanıtı olmadığını; son 28 günde commit ve farklı yazar bulunmadığını not etmek gerekir. Yükselişin özel nedenini mevcut verilerle doğrulamak mümkün değil.

Free email OSINT tool, 5000+ platforms, identity clustering, breach detection. No API keys required. pip install mailaccess

OpenOSINT, OSINT araştırmalarını doğal dil üzerinden yürüten; REPL, CLI, Web UI ve MCP arayüzleri sunan bir Python aracıdır.

Neden yükseliyor · 144 günlük yaşına karşılık 1.657 yıldız ve son 28 günde 30 commit, projeye yönelik ilgi ve yakın dönem geliştirme temposuna işaret ediyor; ancak farklı yazar sayısının 2 olması sürdürülebilirlik kanıtını sınırlıyor.

Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.

RAM efficient terminal agent harness for coding, cybersecurity, and automation.

Self-hosted dark web OSINT platform. Automated threat intelligence from query to graph in 13 steps. Free alternative to Recorded Future, Dar

🔎 Username, email & phone OSINT — 9,700+ lookup checks from 19 projects, with profile enrichment, bulk searches, evidence graphs and expert-

Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK,

Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay y

Local security intelligence for CVE triage - 40 data sources and 41 tools, risk scores and an MCP server for AI agents, all in native Rust.

Open source agentic SAST. The engine behind hundreds of disclosed zero-days. 100+ AI security agents, any repo or PR diff, bring your own mo

One verdict per IP, in plain words — evidence, confidence, geo & ASN fused from 60 public intel sources. 53/60 need no API key. One command,

Local-first credential manager & validator for red teams / pentest：致力于 ALL IN ONE 的本地凭据管理与验证平台 keyrealm（凭域）。 允许将红队渗透测试中获取的散落在各处的 API Key、云厂商

A structured, versioned archive of adversarial prompt engineering techniques against Large Language Models — for AI safety research, red-tea

Find zero-days while you sleep. DeepZero is an automated vulnerability research framework that parses, decompiles, and analyzes thousands of

Dark-GPT: The ultimate unrestricted AI assistant for cybersecurity research by M4TH4CK3R

DeepSec — AI Security Offense & Defense Platform. Shield audits AI-generated code for hallucinated packages, missing safeguards & AI pattern

JsOwl —— Go 编写的 Web 安全信息收集利器。集 JavaScript 信息收集、API 端点提取、敏感信息扫描、攻击面梳理 于一体，同时提供 CLI 工具与 Go 库。内置 direct / browser / auto 三种采集模式，兼容 HaE 规则，支持登录态

Protecting digital communications against audio deepfakes with real-time AI. This system analyzes audio streams to detect synthesized voices

Open Source Agentic Security Scanner

AI red-team platform. Autonomous LLM agents run a penetration test end to end inside a Kali container and write the report. LangGraph plan/a

Supervised, Hermes-native penetration testing profile with 35 routed playbooks, guarded target execution, persistent engagement state, evide

Open-source, self-hosted OSINT investigation platform: turn documents into a live, investigated entity graph. Autonomous agent, graph analyt

Scan, fuzz, and assess OT protocols from one CLI.

Local-first offensive security engagement platform for mapping assets, credentials, sessions, pivots, findings, evidence, and attack paths.

AI-driven malware analysis framework with 30+ integrated tools, web REPL, and MCP server

28 OSINT Agent Skills that turn Cursor, Claude & AI coding agents into a full open-source intelligence platform — reconnaissance, attributio

SafeSurf AI is a fast and privacy-first browser extension that helps users browse safely by detecting and blocking adult or unsafe content i

Android Wi-Fi/BLE radar terminal with camera-maker, tracker, Flock and public safety signatures. Works alone or with an optional CYD over US

27 scope-enforced AI agents that run the full pentest kill-chain (recon → exploit → post-ex → DFIR → report) as a one-command Claude Code pl

Autonomous Bug Bounty Hunting Framework powered by Claude Code. 20 AI agents, state-machine orchestration, Burp Suite MCP, credential vault,

Embedded Device Security Assessment Framework — 700 modules, 350 CVEs, 55 vendors, APT Group Engine. Covers routers, IP cameras, GPON ONTs,

High-assurance, artifact-agnostic prompt for authorized security labs, exploit-chain research, PoC validation, and evidence-led reporting.

TriLane: autonomous AI pentester and multi-agent security auditor for authorized gray-box testing of web apps and APIs. Built with Rust and

Official VirusTotal MCP server for AI agents: threat intelligence, file analysis, and recovery through VTAI.

Annuaire interactif de 1 227 outils OSINT classés en 24 catégories — recherche instantanée (insensible aux accents), filtres par type de res

🛡️ Turnkey cybersecurity lab for Hermes Agent — 397 CVE-driven skills, 152 tools, 28 frameworks (MITRE ATT&CK, MISP, CVSS, EPSS, OWASP, NIST

Open-source cybersecurity analysis agent for Claude Code. Scans projects for vulnerabilities across all OWASP 2025 Top 10 and CWE Top 25 cat

Akashic is an open-source Palantir alternative for connecting, exploring, and analyzing complex data. Fully self-hosted, privacy-first, and

Laravel Security Tool

LLM-native static vulnerability detection: point it at a repo and get a reviewable vuln report, the way a human auditor would.