Havuz

Watson — free OSINT tool for Windows: people search across 3,100+ public sites by nickname, email, phone or website. Open-source intelligenc

Enterprise Zero-Trust AI Security & Governance Gateway: Real-Time Prompt Injection Defense, Action Scoping, HITL Approvals, Post-Quantum Mer

AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP inte

Local security intelligence for CVE triage - 40 data sources and 41 tools, risk scores and an MCP server for AI agents, all in native Rust.

基于 ARTEX 的 AI 自主渗透测试系统，支持多 Agent 协作、资产探索与漏洞管理，提供本地部署面板。

Self-hosted pentest engagement management and report.

AI-driven malware analysis framework with 30+ integrated tools, web REPL, and MCP server

Local-first credential manager & validator for red teams / pentest：致力于 ALL IN ONE 的本地凭据管理与验证平台。 允许将红队渗透测试中获取的散落在各处的 API Key、云厂商 AK/SK、机器人 To

Terminal research and study client for MITRE ATT&CK®

An automated way to discover practical, hands on penetration testing projects using Claude, with structured learning roadmaps, relevant secu

AI 自主渗透测试 · 红队作战平台 | 多 Agent 自主推进 · 漏洞情报运营 · 后渗透与 C2 | LLM 三通道轮询 | 全程证据留痕 | 原百度攻防赛冠军项目独立演进版

ARTEX · AI autonomous penetration testing system (multi-agent LLM, Go + Next.js) · AI 自主渗透测试系统 · 百度 agent+ 攻防挑战赛冠军

🔎 Username, email & phone OSINT — 9,700+ lookup checks from 19 projects, with profile enrichment, bulk searches, evidence graphs and expert-

Open, practitioner-maintained Detection Engineering curriculum.

Self-hosted open source security validation workspace: approved scope, evidence and independent retests

A Purple Team lab simulating Active Directory attacks (Kerberoasting, BloodHound, lateral movement) and implementing defensive hardening (gM

Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish

An informational platform that provides live GitHub data for programming languages, frameworks, libraries, and database technologies. This p

Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8

A structured, versioned archive of adversarial prompt engineering techniques against Large Language Models — for AI safety research, red-tea

Rust 跨平台应急响应分析工具，提供 CLI 与桌面 GUI；支持日志、进程和离线流量分析、案件项目管理、IOC 匹配、AI 辅助分析、报告导出及 Windows/Linux 应急命令速查。支持 Windows、Linux、macOS ARM64。

JsOwl —— Go 编写的 Web 安全信息收集利器。集 JavaScript 信息收集、API 端点提取、敏感信息扫描、攻击面梳理 于一体，同时提供 CLI 工具与 Go 库。内置 direct / browser / auto 三种采集模式，兼容 HaE 规则，支持登录态

Open source browser lab to build a simulated infrastructure, watch an attack move through it, and check whether your defense works.

❄️ Static, serverless CVE radar — every new CVE from the last 30 days, ranked by real-world risk (KEV · EPSS · PoC · Metasploit · Nuclei · S

⚔️ Suite de hacking ético 100% client-side: +100 herramientas de ciberseguridad, forense, ingeniería inversa y anti-phishing que corren en t

AI Web Solutions and Python Automation Projects by Krish Sharma 2026

An open database of real-world AI agent incidents.

Grepleaks — your AI pentest environment. An AI pentest agent that lives in your terminal.

RAM efficient terminal agent harness for coding, cybersecurity, and automation.

Local-first privacy toolkit. Map yourself against 400+ data brokers, send CCPA/GDPR deletion mail, and check password dumps. The vault never

Local-first offensive security engagement platform for mapping assets, credentials, sessions, pivots, findings, evidence, and attack paths.

Open-source local AI Agent desktop app for authorized security assessment — Electron + Mastra-powered runtime, visual pentest workflow, Kali

🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomo

Dark-GPT: The ultimate unrestricted AI assistant for cybersecurity research by M4TH4CK3R

Official VirusTotal MCP server for AI agents: threat intelligence, file analysis, and recovery through VTAI.

企业暴露面收集与持续监控（ASM）自托管系统：多源采集、存活与指纹富化、风险线索与变更对照。支持 Linux/Docker 一键部署。

A secure, production-ready Python CLI wrapper for Nmap that makes powerful scans easy and repeatable. Includes 12 built-in profiles (SYN, ag

Real-time tactical OSINT & GEOINT dashboard. Live flight tracking (ADS-B), maritime vessels, satellites, undersea telecom cables & HUD shade

Protecting digital communications against audio deepfakes with real-time AI. This system analyzes audio streams to detect synthesized voices

Rust-native, multi-session headless IDA Pro MCP server with isolated workers and stdio or Streamable HTTP transports.

基于多智能体架构与自主决策机制，配合大语言模型的理解能力，输入自然语言指令，AI 自动完成从目标侦察到漏洞验证的完整渗透测试流程。

Install, run and verify OSINT tools from GitHub automatically, on any OS

🛡️ NexusVault - Enterprise zero-trust cybersecurity vault & real-time credential health platform built with React 19 & Tailwind CSS.

Warden is an free and open-source EDR for Linux Workstations written in Rust !

0, tarayıcı, terminal ve MCP üzerinden güvenlik iş akışları çalıştırıp bulguları iş etkisine göre önceliklendiren açık kaynak bir güvenlik platformudur.

Neden yükseliyor · 46 günde 492 yıldız ve son 28 günde 677 commit dikkat çekici bir ivmeye işaret ediyor; YC desteği ve browser, CLI, MCP birleşimi de görünürlüğü artırabilir. Ancak commitlerin tek farklı yazardan gelmesi, hareketliliğin geniş topluluk katkısı anlamına gelmediğini gösteriyor.

BGNexa AI — Evidence intelligence for cybersecurity, privacy and regulatory readiness.

Behavioral-discipline skill turning an AI agent into a methodical, non-robotic bug-bounty & pentest hunter - 42 always-on rules: scope, cove

🥷 Give your codebase a black belt. Local code intelligence, security analysis, and compiler-backed facts for humans and AI.

High-performance Rust-based DNS-over-TLS (DoT) server with advanced ad-blocking for Android via Termux.

Privacy-first Chrome extension for fast, user-initiated web reconnaissance and page inspection.