Havuz

Detonate files & URLs in cloud malware sandboxes (Hybrid Analysis, tria.ge, ANY.RUN) and enrich IOCs across MalwareBazaar, ThreatFox, URLhau

Run cyber-AI agents against real missions in isolated environments. Record everything as OpenTelemetry evidence. Grade the evidence, not the

TriLane: autonomous AI pentester and multi-agent security auditor for authorized gray-box testing of web apps and APIs. Built with Rust and

Declaratively deploy & manage multiple isolated AI agents on a single NixOS machine — each with its own secrets, skills, and personality.

Open-source asset inventory — turn scattered, contradictory tool data into one reliable inventory, then chat with it using the LLM of your c

Free, open-source ICS/SCADA cybersecurity training platform — Electron + Docker. Real protocol traffic, PLC IDE, Kali attack terminal, Suric

An open database of real-world AI agent incidents.

xnew is a fast, low-memory CLI that appends only unique lines to files. Built in Go for large datasets, it streams input efficiently and sca

An OWASP-aligned intentionally vulnerable platform for learning and testing AI, LLM, RAG, MCP, and Agentic AI security.

LLM benchmark results for THOR forensic finding triage quality

A secure, production-ready Python CLI wrapper for Nmap that makes powerful scans easy and repeatable. Includes 12 built-in profiles (SYN, ag

Official VirusTotal MCP server for AI agents: threat intelligence, file analysis, and recovery through VTAI.

Modular Discord bot for CTF teams and tech communities: server setup, CTF workspaces, daily CTF radar, news digests and radio.

Talk to your computer. Icebreaker transforms natural language into safe Linux actions through isolated AI brains, kernel-enforced sandboxes.

Ansible CIS Benchmark Compliance Remediation for DEBIAN13

Cybersecurity knowledge graph for code review with evidence-backed answers

AI-enhanced OSINT and situational awareness platform with live map layers, browser recon tools, and fusion dossiers.

The autonomous pentester that proves its findings — AI-driven, evidence-first, behind-login.

AI Agent 的安全守门员。在API 返回结果用户确认执行之前，及时拦截危险内容。The safety gatekeeper for AI Agents. Timely intercept dangerous content before the API returns re

🥷 Give your codebase a black belt. Local code intelligence, security analysis, and compiler-backed facts for humans and AI.

Annuaire interactif de 1 227 outils OSINT classés en 24 catégories — recherche instantanée (insensible aux accents), filtres par type de res

Red Team + Blue Team agents for Claude Code. Automated security auditing with ~100 lines of Markdown each.

bb-huge 🤗 , Personal bug bounty findings hub and bug bounty orchestration for multiple agents

Local-first offensive security engagement platform for mapping assets, credentials, sessions, pivots, findings, evidence, and attack paths.

Automated IP blacklist aggregator from 23 threat intelligence sources - updated hourly via GitHub Actions

Sovereign OSINT platform for modern investigators. Local-first, open-source, and privacy-centric.

🛡️ Turnkey cybersecurity lab for Hermes Agent — 397 CVE-driven skills, 152 tools, 28 frameworks (MITRE ATT&CK, MISP, CVSS, EPSS, OWASP, NIST

Open, practitioner-maintained Detection Engineering curriculum.

Install, run and verify OSINT tools from GitHub automatically, on any OS

High-performance Rust-based DNS-over-TLS (DoT) server with advanced ad-blocking for Android via Termux.

Terminal research and study client for MITRE ATT&CK®

Android Wi-Fi/BLE radar terminal with camera-maker, tracker, Flock and public safety signatures. Works alone or with an optional CYD over US

Enterprise Zero-Trust AI Security & Governance Gateway: Real-Time Prompt Injection Defense, Action Scoping, HITL Approvals, Post-Quantum Mer

基于 ARTEX 的 AI 自主渗透测试系统，支持多 Agent 协作、资产探索与漏洞管理，提供本地部署面板。

Self-hosted counter-surveillance for the networks you control: map device and network exposure, verify trusted routes, and hold sensitive ac

LLM-first deception framework: "The honeypot that talks back!™"

Self-hosted, agentic vulnerability research for binaries & firmware: an AI agent decompiles, fuzzes, and verifies exploits inside a sandbox,

Passive blue-team security scanner — 582 read-only modules, plus 32 opt-in probes. Runs on your machine. No accounts. No telemetry.

ThreatRadar is an open-source Threat Intelligence pipeline for SOC and threat intelligence teams that ingests, enriches, scores, and validat

Defensive research and practical examples for DDoS detection, mitigation, and resilient web architecture.

MCP server for CVE intelligence: 16 read-only tools for CVE records, CISA KEV, EPSS history, exploits, fix guidance as sources state it, ver

Rust 跨平台应急响应分析工具，提供 CLI 与桌面 GUI；支持日志、进程和离线流量分析、案件项目管理、IOC 匹配、AI 辅助分析、报告导出及 Windows/Linux 应急命令速查。支持 Windows、Linux、macOS ARM64。

An AI-driven tool designed to automate the detection of security vulnerabilities in Java source code.

Nuitka Assembly analyzer (as well as PyInstaller and other packagers) and native exe-files for extracting metadata, strings, modules, and st

OMCBench is a benchmark suite for evaluating malicious-code detection capabilities. The benchmark consists of a labeled set of 800 Python an

🛡️ Explainable AI Malware Analysis Platform with PE Static Analysis, YARA Engine, SHAP Explainability & Real-Time Dashboard

Repositório destinado a resumos e estudo do curso Cyber Academy (FEBRABAN)

An automated way to discover practical, hands on penetration testing projects using Claude, with structured learning roadmaps, relevant secu

FRIDAY is an autonomous cognitive AI operating system for memory, reasoning, voice, cybersecurity, and self-improvement. It runs locally and

Empowers the AI to perform penetration testing, vulnerability assessment, reconnaissance, and security reporting — all through natural langu