Havuz

Run Windows and Linux programs on Windows, Linux and Android. A user-mode NT and Linux kernel emulator with WHP/KVM acceleration.

Akashic is an open-source Palantir alternative for connecting, exploring, and analyzing complex data. Fully self-hosted, privacy-first, and

A Python CLI tool that scans all repositories owned by a GitHub user/org for accidentally committed secrets (API keys, tokens, passwords, pr

Laravel Security Tool

Autonomous multi-agent pentest framework — plans, exploits, verifies (proof-required), CVSS-scores and writes client-ready reports. 104/104

Open-source, self-hosted OSINT investigation platform: turn documents into a live, investigated entity graph. Autonomous agent, graph analyt

🤖 Autonomous AI-powered ethical hacking agent powered by Llama 3.1 70B on NVIDIA NIM

Rational engineering system prompt for Codex and LLMs — focused on accuracy, software engineering, AI, security research, bug bounty, and re

Autonomous Bug Bounty Hunting Framework powered by Claude Code. 20 AI agents, state-machine orchestration, Burp Suite MCP, credential vault,

Free, open-source tool to build a NIST CSF 2.0 Current Profile and gap analysis from an organization's documents (AI-assisted, human-validat

A structured, versioned archive of adversarial prompt engineering techniques against Large Language Models — for AI safety research, red-tea

Audit and fix your Mac's security in one command. No agent, no signup, open source.

👻 AI-Powered Pentesting Command Center — Autonomous security testing with real-time streaming, self-improving AI, unlimited tool iterations,

AI Web Solutions and Python Automation Projects by Krish Sharma 2026

LLM-native static vulnerability detection: point it at a repo and get a reviewable vuln report, the way a human auditor would.

Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and L

🛡️ A modern, AI-powered WAF with visual forensic playback via rrweb. Protect your web apps with LLM-driven threat detection, real-time visua

Elevate your AI assistants (like Claude & Cursor) into autonomous cybersecurity experts. Pentester-MCP integrates 200+ pentesting tools via

AI-driven malware analysis framework with 30+ integrated tools, web REPL, and MCP server

Embedded Device Security Assessment Framework — 700 modules, 350 CVEs, 55 vendors, APT Group Engine. Covers routers, IP cameras, GPON ONTs,

Get Claude Code and other AI agents approved for use at work — deterministic guardrails on every tool call, tamper-evident audit logs, and a

A golang-written credential harvesting framework leveraging eBPF for kernel-level monitoring with anti-detection capabilities.

AI agent browser for web reverse engineering

Open-source benchmark of 5 intentionally vulnerable web apps with 100 baseline vulnerabilities for evaluating AI penetration testing agents.

企业暴露面收集与持续监控（ASM）自托管系统：多源采集、存活与指纹富化、风险线索与变更对照。支持 Linux/Docker 一键部署。

Protecting digital communications against audio deepfakes with real-time AI. This system analyzes audio streams to detect synthesized voices

The AI security agent guards your code.

AI Firewall & LLM security toolkit - protect your AI applications from prompt injection, jailbreaks, PII leakage, and adversarial attacks

Outside-in replication of Anthropic's Mythos Preview / Project Glasswing — open-source agentic vulnerability-discovery scaffold on Claude Op

Open source browser lab to build a simulated infrastructure, watch an attack move through it, and check whether your defense works.

Open Source Firewall IP List Publishing

reconnaissance for agent attack surfaces

Nutcracker is a powerful, modular and extensible framework designed for mobile security analysis and offensive threat intelligence. Detects

Local-first privacy toolkit. Map yourself against 400+ data brokers, send CCPA/GDPR deletion mail, and check password dumps. The vault never

SafeSurf AI is a fast and privacy-first browser extension that helps users browse safely by detecting and blocking adult or unsafe content i

Secrets scanner with a twist... this is for getting threat actor credentials from MALWARE. Acquire TA creds from FLOSS exports, memdumps, B

Zero-touch pipeline that turns newly weaponized CVEs from the CISA Known Exploited Vulnerabilities (KEV) catalog into production-ready Sigma

C2 server fingerprinter — Cobalt Strike, Sliver, Mythic, Havoc, Brute Ratel

Grepleaks — your AI pentest environment. An AI pentest agent that lives in your terminal.

🛡️Self-hosted security analytics & threat detection for Discord servers. Real-time phishing, raids, spam detection. Privacy-first with GDPR

An open-source Linux terminal course from zero to Linux Power User.

A Purple Team lab simulating Active Directory attacks (Kerberoasting, BloodHound, lateral movement) and implementing defensive hardening (gM

Evidence-first AI OSINT casefile with 40 passive modules, live recon streaming, provenance-led reports, and an entity graph.

基于Agent驱动的网络安全流量监控与分析平台，下一代AI驱动的安全运营协作平台 — 智能告警研判、资产关联、协同处置与自动化报告生成，为护网行动增添一把利器。

A lightweight network security tool that verifies IP location, validates network safety, and prevents access to protected links when unexpec

Verifiable and free cloud compute for AI agents. webMCP + MCP native. Check out our sandboxed Beta + research in the README

Cyber Threat Intelligence Skills for each stage of the CTI Lifecycle.

Behavioral-discipline skill turning an AI agent into a methodical, non-robotic bug-bounty & pentest hunter - 42 always-on rules: scope, cove

MCP server with 55 security intelligence tools — CVE/KEV, MITRE ATLAS+D3FEND, Sigma detection rules, email security posture (SPF/DMARC), dom

Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation