Havuz

An automated way to discover practical, hands on penetration testing projects using Claude, with structured learning roadmaps, relevant secu

AI Agent + 抓包融合安全测试工具 | 自然语言驱动自主渗透测试 | ReAct 编排引擎 | Tauri + FastAPI

An elite, self-orchestrating cyber-offensive platform built for relentless surface expansion, real-time intelligence gathering, precision vu

Proof-of-concept demonstrating browser-native file encryption via the File System Access API. No software installation required - runs entir

Self-hosted pentest engagement management and report.

🤖 Autonomous AI-powered ethical hacking agent powered by Llama 3.1 70B on NVIDIA NIM

Security-first AI-native C5 teamserver (Command · Control · Cognitive · Collaborative · Coordination) for authorized red team & pentest. Bui

Your app is guilty until proven secure: an agent skill whose /hack-me breaks into your own running app, proves each bug with a real request,

An advanced Out-of-Band and In-Band SSRF fuzzing scanner with dynamic request tracking.

Behavioral-discipline skill turning an AI agent into a methodical, non-robotic bug-bounty & pentest hunter - 42 always-on rules: scope, cove

Autonomous offensive security agent. Plans engagements, runs recon, chains exploits, and writes reports - end to end. Native to Claude Code,

Open-source Supabase security auditor: detects RLS-disabled tables, public buckets, exposed SECURITY DEFINER functions. Active anonymous pro

Passive blue-team security scanner — 582 read-only modules, plus 32 opt-in probes. Runs on your machine. No accounts. No telemetry.

Empowers the AI to perform penetration testing, vulnerability assessment, reconnaissance, and security reporting — all through natural langu

🛡️ AI-powered reconnaissance framework unifying 130+ security tools — subdomain enum, vuln scanning, cloud/IoT recon, dark web monitoring &

Bug bounty hunting & penetration testing skills for Claude, Codex, and any agentic coding tool.

Harness-driven terminal AI agent for authorized security assessment, with TUI, headless automation, persistent context, 150 built-in skill

BrokenMCP is a vulnerable implementation of the Model Context Protocol (MCP) for educational purposes.

Find every API request a web app makes, from the JavaScript it ships: method, URL, body, headers and GraphQL operations. One command.

A privacy-first, fail-closed AI pentest conductor and autonomous Red Team platform

Offensive web security scanner — OWASP Top 10 · MCP server · CLI · Go

Autonomous web-app pentest engine — a multi-agent pipeline wielding 30+ offensive-security tools as skills, PoC-validated findings. Built on

60+ detectors for web, plus mobile apps and smart contracts. Every finding is mapped to the OWASP Top 10, marked Confirmed when we have proo

发现藏在前端代码里的 API，验证未授权访问风险 · 动态浏览器追踪 × JavaScript 静态分析

基于多智能体架构与自主决策机制，配合大语言模型的理解能力，输入自然语言指令，AI 自动完成从目标侦察到漏洞验证的完整渗透测试流程。

Real-world AI penetration testing engineer for authorized assessments — built-in cloud module covering AWS/Azure/GCP + Aliyun/Tencent/Huawei

DianXing - AI-Driven End-to-End Code Security Auditing

Advanced web security scanner with 49 modules, evasion engine, and CVE database.

AutoCVE, kaynak kodu üzerinde agent tabanlı güvenlik denetimi yapıp bulguları doğrulamayı ve CVE başvuru raporları üretmeyi amaçlayan bir platformdur.

Neden yükseliyor · 104 günde 1416 yıldıza ulaşmış olması ve README’de 14 projede bir haftada 30 güvenlik açığı bulup başvuruya sunduğu iddiası dikkat çekiyor. Ancak yıldızlar ve README’deki sonuç beyanı tek başına etkinliğin kalitesini veya tekrarlanabilirliğini kanıtlamaz; son 28 gündeki 4 commit ve 2 farklı yazar aktivitenin sınırlı olduğuna işaret ediyor.