Havuz

A curated, OS-agnostic field reference for offensive security: command-first cheatsheets for pentesting, CTFs, and HTB/OSCP exams.

🛡️ NexusVault - Enterprise zero-trust cybersecurity vault & real-time credential health platform built with React 19 & Tailwind CSS.

An autonomous agentic pipeline that finds, proves, and patches real C memory-safety vulnerabilities end-to-end using a single 7B open-source

A stateful AI Intrusion Prevention System (IPS) that reassembles TCP packet fragments in sequence order and uses PyTorch deep learning model

AI Agent + 抓包融合安全测试工具 | 自然语言驱动自主渗透测试 | ReAct 编排引擎 | Tauri + FastAPI

Open-source enterprise SOC platform — SIEM · SOAR · EDR · DPI · MDM · NGFW in one stack. Self-host in minutes.

SQLGuardJS is Express request verification for SQL injection, XSS, and NoSQL injection with heuristic detection, schema checks, structured l

A Fun PowerShell Server

An elite, self-orchestrating cyber-offensive platform built for relentless surface expansion, real-time intelligence gathering, precision vu

AI Powered Reverse Engineering Tool

Self-hosted pentest engagement management and report.

An informational platform that provides live GitHub data for programming languages, frameworks, libraries, and database technologies. This p

Rust-native, multi-session headless IDA Pro MCP server with isolated workers and stdio or Streamable HTTP transports.

Утилита для сканирования и восстановления системы после вирусных атак. Находит и удаляет вредоносные изменения в реестре Windows: IFEO Debug

Warden is an free and open-source EDR for Linux Workstations written in Rust !

Static security scanner for AI agent skill packages. Detects malicious SKILL.md files and bundled scripts before they run.

A local wordlist intelligence and workflow management tool for offensive security & Bug Bounty workflows.

Convert Sigma detection rules to production-ready Wazuh XML. CLI tool with batch processing, ZIP input, field mapping, and config file suppo

Harness-driven terminal AI agent for authorized security assessment, with TUI, headless automation, persistent context, 150 built-in skill

Self-hosted open source security validation workspace: approved scope, evidence and independent retests

Terminal-native passive OSINT CLI for local-first public-source investigations, evidence correlation, and case management.

Experimental Subset Sum solver for large integers using SQLite as an out-of-core storage engine.

Privacy-first Chrome extension for fast, user-initiated web reconnaissance and page inspection.

Mapa multinorma en español: ENS, ISO/IEC 27001, NIS2, ISO/IEC 42001, DORA, RGPD, NIST CSF 2.0 y leyes LATAM. 594 requisitos sobre 152 contro

❄️ Static, serverless CVE radar — every new CVE from the last 30 days, ranked by real-world risk (KEV · EPSS · PoC · Metasploit · Nuclei · S

A privacy-first, fail-closed AI pentest conductor and autonomous Red Team platform

NEXUS REDFOX — Local-first code intelligence and security analysis platform for developers and security researchers.

Autonomous web-app pentest engine — a multi-agent pipeline wielding 30+ offensive-security tools as skills, PoC-validated findings. Built on

A Python CLI tool that scans all repositories owned by a GitHub user/org for accidentally committed secrets (API keys, tokens, passwords, pr

Rational engineering system prompt for Codex and LLMs — focused on accuracy, software engineering, AI, security research, bug bounty, and re

Open-source practical cybersecurity learning platform with structured lessons, guided labs, progress tracking, and a custom Lab Engine.

🛡️ A modern, AI-powered WAF with visual forensic playback via rrweb. Protect your web apps with LLM-driven threat detection, real-time visua

C2 server fingerprinter — Cobalt Strike, Sliver, Mythic, Havoc, Brute Ratel

Vigilyx is a Rust-powered email security analysis platform/Gateway for passive traffic monitoring and inline MTA inspection, with threat det

Lyrie.ai — The world's first autonomous AI cybersecurity agent. Built by OTT Cybersecurity LLC.

MCP server for CVE intelligence: 16 read-only tools for CVE records, CISA KEV, EPSS history, exploits, fix guidance as sources state it, ver

A curated developer second brain with battle-tested blueprints: 24/7 zero-cost full-stack cloud hosting, open-source licensing and IP defens