Havuz

AI agent browser for web reverse engineering

Cyber Threat Intelligence Skills for each stage of the CTI Lifecycle.

Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation

A retro textmode blog theme for purists.

Run cyber-AI agents against real missions in isolated environments. Record everything as OpenTelemetry evidence. Grade the evidence, not the

Free, open-source ICS/SCADA cybersecurity training platform — Electron + Docker. Real protocol traffic, PLC IDE, Kali attack terminal, Suric

An open database of real-world AI agent incidents.

Enterprise Zero-Trust AI Security & Governance Gateway: Real-Time Prompt Injection Defense, Action Scoping, HITL Approvals, Post-Quantum Mer

基于 ARTEX 的 AI 自主渗透测试系统，支持多 Agent 协作、资产探索与漏洞管理，提供本地部署面板。

Rust 跨平台应急响应分析工具，提供 CLI 与桌面 GUI；支持日志、进程和离线流量分析、案件项目管理、IOC 匹配、AI 辅助分析、报告导出及 Windows/Linux 应急命令速查。支持 Windows、Linux、macOS ARM64。

Run Windows and Linux programs on Windows, Linux and Android. A user-mode NT and Linux kernel emulator with WHP/KVM acceleration.

Autonomous multi-agent pentest framework — plans, exploits, verifies (proof-required), CVSS-scores and writes client-ready reports. 104/104

Free, open-source tool to build a NIST CSF 2.0 Current Profile and gap analysis from an organization's documents (AI-assisted, human-validat

Audit and fix your Mac's security in one command. No agent, no signup, open source.

A golang-written credential harvesting framework leveraging eBPF for kernel-level monitoring with anti-detection capabilities.

Outside-in replication of Anthropic's Mythos Preview / Project Glasswing — open-source agentic vulnerability-discovery scaffold on Claude Op

High-fidelity Claude Fable 5 (Mythos) environment emulation and automated multi-agent jailbreak (Pack Hunt) research laboratory.

LingXi: multi-agent CTF and pentest framework originated from Tencent Security Hackathon

Grepleaks — your AI pentest environment. An AI pentest agent that lives in your terminal.

An open-source Linux terminal course from zero to Linux Power User.

A lightweight network security tool that verifies IP location, validates network safety, and prevents access to protected links when unexpec

Behavioral-discipline skill turning an AI agent into a methodical, non-robotic bug-bounty & pentest hunter - 42 always-on rules: scope, cove

MCP server with 55 security intelligence tools — CVE/KEV, MITRE ATLAS+D3FEND, Sigma detection rules, email security posture (SPF/DMARC), dom

基于多智能体架构与自主决策机制，配合大语言模型的理解能力，输入自然语言指令，AI 自动完成从目标侦察到漏洞验证的完整渗透测试流程。

Detonate files & URLs in cloud malware sandboxes (Hybrid Analysis, tria.ge, ANY.RUN) and enrich IOCs across MalwareBazaar, ThreatFox, URLhau

The autonomous pentester that proves its findings — AI-driven, evidence-first, behind-login.

Red Team + Blue Team agents for Claude Code. Automated security auditing with ~100 lines of Markdown each.

Automated IP blacklist aggregator from 23 threat intelligence sources - updated hourly via GitHub Actions

Open, practitioner-maintained Detection Engineering curriculum.

Nuitka Assembly analyzer (as well as PyInstaller and other packagers) and native exe-files for extracting metadata, strings, modules, and st

Deterministic semantic linter and PR reviewer for IEC 61131-3 Structured Text. 80 checks across diff-based, static integrity, FB-instance, P

AI-orchestrated, Kali-native pentesting lab: an MCP tool-server with scope/VPN/rate/audit enforced in code, independent finding verification

Real-time tactical OSINT & GEOINT dashboard. Live flight tracking (ADS-B), maritime vessels, satellites, undersea telecom cables & HUD shade

Open-source config scanner for AI coding agents: scores the permissions, hooks, sandbox and MCP settings of Claude Code, Codex, Cursor and G

AI-powered log diagnostics engine that analyzes server logs, stack traces, and infrastructure failures to identify root causes and recommend

⚔️ Suite de hacking ético 100% client-side: +100 herramientas de ciberseguridad, forense, ingeniería inversa y anti-phishing que corren en t

Official VulnCheck MCP Server

High-performance OSINT/CTI framework for automated identity pivoting and risk analysis across 120+ sources.

Self-hosted Microsoft 365 security operations dashboard — aggregates Defender XDR, Entra ID Protection, Intune, Compliance and more into one

Tactical AI Workspace Monitor & EDR

Network traffic visualization tool

A blazingly fast, multi-threaded TUI malware analysis tool built in Rust. Features deep PE parsing, YARA scanning, and heuristic risk scorin

IAGA Sentinel sits next to your AI agents and answers the one question the agent itself cannot.

Modern offline-first Application Security Intelligence Platform for Android, iOS, Flutter and React Native with attack-chain analysis, expla

🤖 Autonomous AI-powered ethical hacking agent powered by Llama 3.1 70B on NVIDIA NIM

👻 AI-Powered Pentesting Command Center — Autonomous security testing with real-time streaming, self-improving AI, unlimited tool iterations,

AI Web Solutions and Python Automation Projects by Krish Sharma 2026

Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and L

Elevate your AI assistants (like Claude & Cursor) into autonomous cybersecurity experts. Pentester-MCP integrates 200+ pentesting tools via

Get Claude Code and other AI agents approved for use at work — deterministic guardrails on every tool call, tamper-evident audit logs, and a