Havuz

A professional, high-fidelity de-anonymization and vulnerability diagnostic framework. Features a zero-coupling modular architecture for bro

ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, and

Claude Code ve uyumlu agent harness'leri için web güvenliği ve red-team çalışmalarına yönelik beceriler, komutlar ve iş akışları sunan bir skill bundle'dır.

Neden yükseliyor · 145 günlük yaşına göre 4.671 yıldız ve son 28 günde 37 commit dikkat çekiyor; bu, güncel geliştirme ve görünürlük sinyali. Ancak 3 farklı yazarla katkı tabanı dar ve README'deki 'battle-tested' iddiası bağımsız kullanım verisiyle doğrulanmıyor.

The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.

AI 自主渗透测试 · 红队作战平台 | 多 Agent 自主推进 · 漏洞情报运营 · 后渗透与 C2 | LLM 三通道轮询 | 全程证据留痕 | 原百度攻防赛冠军项目独立演进版

pentest-ai-agents, Claude Code içinde yetkili penetration testing iş akışlarına yönelik uzmanlaşmış subagent’lar sunan bir koleksiyondur.

Neden yükseliyor · 188 günde 2301 yıldız, Claude Code için doğrudan kurulabilen 50 uzman agent ve geniş güvenlik kapsamına yönelik belirgin ilgi gösteriyor. Bunun benimsenme veya çıktı kalitesi kanıtı olmadığını; son 28 günde commit ve farklı yazar bulunmadığını not etmek gerekir. Yükselişin özel nedenini mevcut verilerle doğrulamak mümkün değil.

Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay y

Pentest Harness, yetkili güvenlik testleri için farklı LLM sağlayıcılarını ve pentest araçlarını yerel bir arayüzde birleştiren self-hosted bir agent çalışma alanıdır.

Neden yükseliyor · 33 günlük bir repoda 398 yıldız dikkat çekiyor; ancak README dışındaki benimseme verisi bilinmiyor ve son 28 günde 2 commit ile 2 farklı yazar görülmesi geliştirme temposu hakkında güçlü kanıt sunmuyor.

Security-testing methodology as portable, tool-agnostic agent skills for Claude Code and any agent runtime: white-box bug hunting, AI-agent

Local-first credential manager & validator for red teams / pentest：致力于 ALL IN ONE 的本地凭据管理与验证平台。 允许将红队渗透测试中获取的散落在各处的 API Key、云厂商 AK/SK、机器人 To

Deception-layer honeypot that captures & reverse-controls AI pentest agents — embedded decoys, prompt-injection counter-offense, MCP honeypo

Dark-GPT: The ultimate unrestricted AI assistant for cybersecurity research by M4TH4CK3R

Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path analysi

AI red-team platform. Autonomous LLM agents run a penetration test end to end inside a Kali container and write the report. LangGraph plan/a

Local-first offensive security engagement platform for mapping assets, credentials, sessions, pivots, findings, evidence, and attack paths.

Supervised, Hermes-native penetration testing profile with 35 routed playbooks, guarded target execution, persistent engagement state, evide

An intentionally vulnerable OWASP LLM Top 10 training platform for AI Security, Prompt Injection, RAG Security, Agent Security, and GenAI pe

Monitors your red team infrastructure.

An open library of 206 security skills for AI agents — pentest, bug bounty, CTF, reversing & defense across 23 domains, with CI-verified rou

A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.

被动JS分析 + 框架识别 + 主动Fuzz + 响应指纹 — 红队API挖掘利器

27 scope-enforced AI agents that run the full pentest kill-chain (recon → exploit → post-ex → DFIR → report) as a one-command Claude Code pl

Chinese-first LLM jailbreak benchmark & red-team toolkit | 中文LLM安全评测框架 | by POJIA.AI

Autonomous AI-powered penetration testing platform. LLM-driven recon, vulnerability analysis, and exploit validation for internal & external

Myrtia — agent-native red teaming for LLMs and AI agents: a deliberating council of attacker models (propose, cross-critique, Borda vote, ch

Run cyber-AI agents against real missions in isolated environments. Record everything as OpenTelemetry evidence. Grade the evidence, not the

Suijin is an open-source fully autonomous red teaming / web app pentesting framework for AI models. Powered by LangGraph, designed for bug b

⚔️ Suite de hacking ético 100% client-side: +100 herramientas de ciberseguridad, forense, ingeniería inversa y anti-phishing que corren en t

Blitz Strike, penetration-testing iş akışını MCP üzerinden sunan ve bulguları canlı doğrulamaya yönelen bir güvenlik aracıdır.

Neden yükseliyor · 15 günlük yaşına rağmen 512 yıldız almış; MCP tabanlı agent iş akışlarıyla penetration testing'i tek entegrasyonda toplama vaadi dikkat çekiyor. Ancak son 28 günde yalnızca 2 commit ve 1 farklı yazar görünmesi, bu ilginin aktif geliştirme veya topluluk katkısıyla henüz desteklenmediğini gösteriyor.

Real-world AI penetration testing engineer for authorized assessments — built-in cloud module covering AWS/Azure/GCP + Aliyun/Tencent/Huawei

Autonomous multi-agent pentest framework — plans, exploits, verifies (proof-required), CVSS-scores and writes client-ready reports. 104/104

pytest for AI agents - Autonomous red-teaming, behavioral monitoring & security testing for LLM agents

Outside-in replication of Anthropic's Mythos Preview / Project Glasswing — open-source agentic vulnerability-discovery scaffold on Claude Op

High-assurance, artifact-agnostic prompt for authorized security labs, exploit-chain research, PoC validation, and evidence-led reporting.

🛡 The reference playbook for pentesting AI chatbots & LLM-powered apps in one place. Ready-to-use payloads covering the full OWASP LLM Top 1

Grepleaks — your AI pentest environment. An AI pentest agent that lives in your terminal.

Red Team + Blue Team agents for Claude Code. Automated security auditing with ~100 lines of Markdown each.

Thick client penetration testing and MSIX security audit toolkit for Windows. Audits .NET, Electron and native binaries: static and runtime

🛡️ Turnkey cybersecurity lab for Hermes Agent — 397 CVE-driven skills, 152 tools, 28 frameworks (MITRE ATT&CK, MISP, CVSS, EPSS, OWASP, NIST

AI-orchestrated, Kali-native pentesting lab: an MCP tool-server with scope/VPN/rate/audit enforced in code, independent finding verification

Open-source adversary emulation for AI agents and MCP servers.

High-performance OSINT/CTI framework for automated identity pivoting and risk analysis across 120+ sources.

Active Directory pentest methodology for Claude Code: skills, agents and slash commands for internal AD red-team work (Kerberoasting, ADCS E

🛡 Official AI Security Tool module for CVE-2026-75604 (Next.js Windows Unauthenticated Remote Code Execution) with safe in-app execution, de

Claude Code plugin: universal radial-tree exploration engine. One tree skill + swappable presets (brainstorm / attack / design / code-audit)

👻 AI-Powered Pentesting Command Center — Autonomous security testing with real-time streaming, self-improving AI, unlimited tool iterations,

Security-first AI-native C5 teamserver (Command · Control · Cognitive · Collaborative · Coordination) for authorized red team & pentest. Bui

AI agent benchmark hackability scanner — find evaluation vulnerabilities before they undermine your results

reconnaissance for agent attack surfaces

Open-source local AI Agent desktop app for authorized security assessment — Electron + Mastra-powered runtime, visual pentest workflow, Kali