Havuz

🛡️ Explainable AI Malware Analysis Platform with PE Static Analysis, YARA Engine, SHAP Explainability & Real-Time Dashboard

Repositório destinado a resumos e estudo do curso Cyber Academy (FEBRABAN)

FRIDAY is an autonomous cognitive AI operating system for memory, reasoning, voice, cybersecurity, and self-improvement. It runs locally and

Empowers the AI to perform penetration testing, vulnerability assessment, reconnaissance, and security reporting — all through natural langu

🛡️ AI-powered reconnaissance framework unifying 130+ security tools — subdomain enum, vuln scanning, cloud/IoT recon, dark web monitoring &

A curated, OS-agnostic field reference for offensive security: command-first cheatsheets for pentesting, CTFs, and HTB/OSCP exams.

An autonomous agentic pipeline that finds, proves, and patches real C memory-safety vulnerabilities end-to-end using a single 7B open-source

A stateful AI Intrusion Prevention System (IPS) that reassembles TCP packet fragments in sequence order and uses PyTorch deep learning model

Open-source enterprise SOC platform — SIEM · SOAR · EDR · DPI · MDM · NGFW in one stack. Self-host in minutes.

SQLGuardJS is Express request verification for SQL injection, XSS, and NoSQL injection with heuristic detection, schema checks, structured l

A Fun PowerShell Server

AI Powered Reverse Engineering Tool

Rust-native, multi-session headless IDA Pro MCP server with isolated workers and stdio or Streamable HTTP transports.

Утилита для сканирования и восстановления системы после вирусных атак. Находит и удаляет вредоносные изменения в реестре Windows: IFEO Debug

Warden is an free and open-source EDR for Linux Workstations written in Rust !

Static security scanner for AI agent skill packages. Detects malicious SKILL.md files and bundled scripts before they run.

A local wordlist intelligence and workflow management tool for offensive security & Bug Bounty workflows.

Convert Sigma detection rules to production-ready Wazuh XML. CLI tool with batch processing, ZIP input, field mapping, and config file suppo

Harness-driven terminal AI agent for authorized security assessment, with TUI, headless automation, persistent context, 150 built-in skill

Self-hosted open source security validation workspace: approved scope, evidence and independent retests

Terminal-native passive OSINT CLI for local-first public-source investigations, evidence correlation, and case management.

Experimental Subset Sum solver for large integers using SQLite as an out-of-core storage engine.

Privacy-first Chrome extension for fast, user-initiated web reconnaissance and page inspection.

Mapa multinorma en español: ENS, ISO/IEC 27001, NIS2, ISO/IEC 42001, DORA, RGPD, NIST CSF 2.0 y leyes LATAM. 594 requisitos sobre 152 contro

❄️ Static, serverless CVE radar — every new CVE from the last 30 days, ranked by real-world risk (KEV · EPSS · PoC · Metasploit · Nuclei · S

A privacy-first, fail-closed AI pentest conductor and autonomous Red Team platform

NEXUS REDFOX — Local-first code intelligence and security analysis platform for developers and security researchers.

Autonomous web-app pentest engine — a multi-agent pipeline wielding 30+ offensive-security tools as skills, PoC-validated findings. Built on

Vigilyx is a Rust-powered email security analysis platform/Gateway for passive traffic monitoring and inline MTA inspection, with threat det

基于多智能体架构与自主决策机制，配合大语言模型的理解能力，输入自然语言指令，AI 自动完成从目标侦察到漏洞验证的完整渗透测试流程。

Talk to your computer. Icebreaker transforms natural language into safe Linux actions through isolated AI brains, kernel-enforced sandboxes.

🛡️ NexusVault - Enterprise zero-trust cybersecurity vault & real-time credential health platform built with React 19 & Tailwind CSS.

AI Agent 的安全守门员。在API 返回结果用户确认执行之前，及时拦截危险内容。The safety gatekeeper for AI Agents. Timely intercept dangerous content before the API returns re

AI-powered log diagnostics engine that analyzes server logs, stack traces, and infrastructure failures to identify root causes and recommend

Local-first privacy toolkit. Map yourself against 400+ data brokers, send CCPA/GDPR deletion mail, and check password dumps. The vault never

MCP server for CVE intelligence: 16 read-only tools for CVE records, CISA KEV, EPSS history, exploits, fix guidance as sources state it, ver

A curated developer second brain with battle-tested blueprints: 24/7 zero-cost full-stack cloud hosting, open-source licensing and IP defens