Havuz

AI agent browser for web reverse engineering

Open-source benchmark of 5 intentionally vulnerable web apps with 100 baseline vulnerabilities for evaluating AI penetration testing agents.

企业暴露面收集与持续监控（ASM）自托管系统：多源采集、存活与指纹富化、风险线索与变更对照。支持 Linux/Docker 一键部署。

High-assurance, artifact-agnostic prompt for authorized security labs, exploit-chain research, PoC validation, and evidence-led reporting.

The AI security agent guards your code.

AI Firewall & LLM security toolkit - protect your AI applications from prompt injection, jailbreaks, PII leakage, and adversarial attacks

SafeSurf AI is a fast and privacy-first browser extension that helps users browse safely by detecting and blocking adult or unsafe content i

Outside-in replication of Anthropic's Mythos Preview / Project Glasswing — open-source agentic vulnerability-discovery scaffold on Claude Op

Open source browser lab to build a simulated infrastructure, watch an attack move through it, and check whether your defense works.

reconnaissance for agent attack surfaces

Nutcracker is a powerful, modular and extensible framework designed for mobile security analysis and offensive threat intelligence. Detects

Local-first privacy toolkit. Map yourself against 400+ data brokers, send CCPA/GDPR deletion mail, and check password dumps. The vault never

High-fidelity Claude Fable 5 (Mythos) environment emulation and automated multi-agent jailbreak (Pack Hunt) research laboratory.

Secrets scanner with a twist... this is for getting threat actor credentials from MALWARE. Acquire TA creds from FLOSS exports, memdumps, B

Zero-touch pipeline that turns newly weaponized CVEs from the CISA Known Exploited Vulnerabilities (KEV) catalog into production-ready Sigma

C2 server fingerprinter — Cobalt Strike, Sliver, Mythic, Havoc, Brute Ratel

LingXi: multi-agent CTF and pentest framework originated from Tencent Security Hackathon

Open-source local AI Agent desktop app for authorized security assessment — Electron + Mastra-powered runtime, visual pentest workflow, Kali

An open-source Linux terminal course from zero to Linux Power User.

Evidence-first AI OSINT casefile with 40 passive modules, live recon streaming, provenance-led reports, and an entity graph.

基于Agent驱动的网络安全流量监控与分析平台，下一代AI驱动的安全运营协作平台 — 智能告警研判、资产关联、协同处置与自动化报告生成，为护网行动增添一把利器。

A lightweight network security tool that verifies IP location, validates network safety, and prevents access to protected links when unexpec

Verifiable and free cloud compute for AI agents. webMCP + MCP native. Check out our sandboxed Beta + research in the README

Cyber Threat Intelligence Skills for each stage of the CTI Lifecycle.

Behavioral-discipline skill turning an AI agent into a methodical, non-robotic bug-bounty & pentest hunter - 42 always-on rules: scope, cove

MCP server with 55 security intelligence tools — CVE/KEV, MITRE ATLAS+D3FEND, Sigma detection rules, email security posture (SPF/DMARC), dom

Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation

A retro textmode blog theme for purists.

基于多智能体架构与自主决策机制，配合大语言模型的理解能力，输入自然语言指令，AI 自动完成从目标侦察到漏洞验证的完整渗透测试流程。

AI-powered deepfake detector that classifies uploaded face images and videos as Real or Fake with confidence scores. Full-stack app built wi

Detonate files & URLs in cloud malware sandboxes (Hybrid Analysis, tria.ge, ANY.RUN) and enrich IOCs across MalwareBazaar, ThreatFox, URLhau

🛡️Self-hosted security analytics & threat detection for Discord servers. Real-time phishing, raids, spam detection. Privacy-first with GDPR

TriLane: autonomous AI pentester and multi-agent security auditor for authorized gray-box testing of web apps and APIs. Built with Rust and

Declaratively deploy & manage multiple isolated AI agents on a single NixOS machine — each with its own secrets, skills, and personality.

Open-source asset inventory — turn scattered, contradictory tool data into one reliable inventory, then chat with it using the LLM of your c

Free, open-source ICS/SCADA cybersecurity training platform — Electron + Docker. Real protocol traffic, PLC IDE, Kali attack terminal, Suric

xnew is a fast, low-memory CLI that appends only unique lines to files. Built in Go for large datasets, it streams input efficiently and sca

An OWASP-aligned intentionally vulnerable platform for learning and testing AI, LLM, RAG, MCP, and Agentic AI security.

LLM benchmark results for THOR forensic finding triage quality

A secure, production-ready Python CLI wrapper for Nmap that makes powerful scans easy and repeatable. Includes 12 built-in profiles (SYN, ag

Ansible CIS Benchmark Compliance Remediation for DEBIAN13

Cybersecurity knowledge graph for code review with evidence-backed answers

AI-enhanced OSINT and situational awareness platform with live map layers, browser recon tools, and fusion dossiers.

The autonomous pentester that proves its findings — AI-driven, evidence-first, behind-login.

AI Agent 的安全守门员。在API 返回结果用户确认执行之前，及时拦截危险内容。The safety gatekeeper for AI Agents. Timely intercept dangerous content before the API returns re

🥷 Give your codebase a black belt. Local code intelligence, security analysis, and compiler-backed facts for humans and AI.

bb-huge 🤗 , Personal bug bounty findings hub and bug bounty orchestration for multiple agents

Red Team + Blue Team agents for Claude Code. Automated security auditing with ~100 lines of Markdown each.

Automated IP blacklist aggregator from 23 threat intelligence sources - updated hourly via GitHub Actions

Sovereign OSINT platform for modern investigators. Local-first, open-source, and privacy-centric.