Havuz

Free, open-source ICS/SCADA cybersecurity training platform — Electron + Docker. Real protocol traffic, PLC IDE, Kali attack terminal, Suric

Autonomous agent that mines Java deserialization gadget chains from any JAR directory. Static bytecode analysis + dynamic JVM probes + dual-

An Open Sourced Model Context Protocol (MCP) Local server that gives AI Clients real-time cybersecurity reconnaissance capabilities

a lightweight, fast, and fully portable reimplementation of Impacket in TypeScript and JavaScript.

The autonomous pentester that proves its findings — AI-driven, evidence-first, behind-login.

WebStrike — automated web-pentesting framework that orchestrates Kali tools (subfinder, httpx, katana, ffuf, nuclei, sqlmap, dalfox) into on

Local-first offensive security engagement platform for mapping assets, credentials, sessions, pivots, findings, evidence, and attack paths.

Thick client penetration testing and MSIX security audit toolkit for Windows. Audits .NET, Electron and native binaries: static and runtime

Autonomous offensive security agent. Plans engagements, runs recon, chains exploits, and writes reports - end to end. Native to Claude Code,

NSAuditor AI Community — open-source network security scanner. 27 discovery plugins, structured findings, SARIF/CSV output, MCP integration,

Open-source Supabase security auditor: detects RLS-disabled tables, public buckets, exposed SECURITY DEFINER functions. Active anonymous pro

基于 ARTEX 的 AI 自主渗透测试系统，支持多 Agent 协作、资产探索与漏洞管理，提供本地部署面板。

Passive blue-team security scanner — 582 read-only modules, plus 32 opt-in probes. Runs on your machine. No accounts. No telemetry.

面向 CTF 竞赛评测平台（TSec Benchmark）的自动化 Web/逻辑漏洞挖掘与利用 Agent：分层调度 + 多会话并发 + 跨会话共享黑板 + 平台权威校验

An automated way to discover practical, hands on penetration testing projects using Claude, with structured learning roadmaps, relevant secu

Empowers the AI to perform penetration testing, vulnerability assessment, reconnaissance, and security reporting — all through natural langu

🛡️ AI-powered reconnaissance framework unifying 130+ security tools — subdomain enum, vuln scanning, cloud/IoT recon, dark web monitoring &

AI Agent + 抓包融合安全测试工具 | 自然语言驱动自主渗透测试 | ReAct 编排引擎 | Tauri + FastAPI

AI-orchestrated, Kali-native pentesting lab: an MCP tool-server with scope/VPN/rate/audit enforced in code, independent finding verification

An elite, self-orchestrating cyber-offensive platform built for relentless surface expansion, real-time intelligence gathering, precision vu

Proof-of-concept demonstrating browser-native file encryption via the File System Access API. No software installation required - runs entir

Self-hosted pentest engagement management and report.

Bug bounty hunting & penetration testing skills for Claude, Codex, and any agentic coding tool.

Harness-driven terminal AI agent for authorized security assessment, with TUI, headless automation, persistent context, 150 built-in skill

BrokenMCP is a vulnerable implementation of the Model Context Protocol (MCP) for educational purposes.

Find every API request a web app makes, from the JavaScript it ships: method, URL, body, headers and GraphQL operations. One command.

A privacy-first, fail-closed AI pentest conductor and autonomous Red Team platform

Offensive web security scanner — OWASP Top 10 · MCP server · CLI · Go

Autonomous web-app pentest engine — a multi-agent pipeline wielding 30+ offensive-security tools as skills, PoC-validated findings. Built on

60+ detectors for web, plus mobile apps and smart contracts. Every finding is mapped to the OWASP Top 10, marked Confirmed when we have proo