Havuz

REA, coding agents aracılığıyla uygulamaları ve native binary'leri inceleyip bulguları yapılandırılmış kanıtlarla sunan bir reverse-engineering aracıdır.

Neden yükseliyor · Agent'ları reverse-engineering araçlarına bağlayan bütünleşik bir CLI/MCP iş akışı sunması ilgi çekiyor olabilir. 174 günde 2392 yıldız ve son 28 günde 108 commit kayda değer ilgi ve aktivite gösteriyor; ancak yalnızca 2 farklı yazar olması geliştirme faaliyetinin dar bir grupta toplandığını düşündürüyor.

ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, and

LordOS — a free, fast and secure GNU/Linux distribution based on Debian, with its own desktop environment: display server and Wayland compos

Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.

AI 自主渗透测试 · 红队作战平台 | 多 Agent 自主推进 · 漏洞情报运营 · 后渗透与 C2 | LLM 三通道轮询 | 全程证据留痕 | 原百度攻防赛冠军项目独立演进版

Stop sending crypto to the wrong address. Kenning checks every wallet address you copy and catches address poisoning and clipboard-hijacking

Android APK 加固工具（DEX 加密 + 壳保护 + 反调试） · Android APK hardening — DEX encryption, stub loader & anti-debug

Codex Security, kod depolarındaki güvenlik açıklarını taramak, doğrulamak ve düzeltme önerileri sunmak için CLI ve TypeScript SDK sağlar.

Neden yükseliyor · 76 günlük yaşına karşın yüksek yıldız sayısı ve son 28 gündeki 188 commit ile 20 farklı yazar, belirgin ilgi ve aktif geliştirme gösteriyor; OpenAI markası da görünürlüğüne katkıda bulunabilir. Bu veriler tek başına tarama kalitesini veya üretim ortamında benimsenmeyi kanıtlamaz.

Niubi Guard, GitHub repository’lerindeki Issue ve yorumları spam, taciz ve koordineli abuse açısından tarayıp yapılandırılabilir yanıtlar öneren bir CLI ve web arayüzüdür.

Neden yükseliyor · 1310 yıldızın 116 günde toplanması ve README’deki Trendshift görünürlüğü dikkat çektiğini gösteriyor; ancak bunun hangi kullanıcı ihtiyacından kaynaklandığı veya gerçek kullanım düzeyi ölçümlerden doğrulanamıyor. Son 28 günde commit ve farklı yazar yok; bu nedenle ilginin güncel geliştirme ya da benimsemeyle sürdüğüne dair kanıt bulunmuyor.

AI red-team platform. Autonomous LLM agents run a penetration test end to end inside a Kali container and write the report. LangGraph plan/a

deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Pa

Offline pentest workflow tracker — turns nmap output into a port-aware, KB-matched recon checklist in under 30 seconds. Self-hosted, single

Seven Agent Skills for NestJS implementation, architecture, OOP, code and feature audits, runtime performance, and safe Git publication.

Local-first, end-to-end encrypted manager for passwords, passkeys, TOTP, cards and notes. Native autofill on macOS and Android, plus a brows

ThreatIntel-Aggregator, güvenlik feed’lerini birleştirip tehditleri analiz eden ve varlıklarla ilişkilendiren self-hosted bir threat intelligence platformudur.

Neden yükseliyor · 14 günde 54 yıldız almış; bu, yeni bir repo için dikkat çekici bir başlangıç. Ancak yalnızca 3 commit ve 2 farklı yazar bilgisi var; yükselişin nedenini veya kullanıcı benimsemesini gösteren bağımsız kanıt mevcut değil.

Lyrie.ai — The world's first autonomous AI cybersecurity agent. Built by OTT Cybersecurity LLC.

Production CI/CD pipeline template with quality gates, container security, SLSA provenance, cosign signing, and automated release management

被动JS分析 + 框架识别 + 主动Fuzz + 响应指纹 — 红队API挖掘利器

The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.

One command. 29 battle-tested security checks built into every AI coding assistant you already use without leaving your IDE.

Evidence-driven Java security review workbench

A fetch wrapper that drops your custom auth headers when a redirect crosses to another origin.

Open Source Safe Roblox Account Manager 2026 Secure Clean Alt Manager

dj - Dynamic JS File Extractor - intelligently detects dynamically loaded JavaScript files by statically analyzing website HTML and JS code

AI code quality toolkit — deterministic linter for the AI coding era. 22 detectors, GitHub Action PR gate, zero LLM required.

Security-hardened openclaw with auth gateway, AES-256 encryption and session management

Zero-dependency TypeScript secret and PII redaction for any SDK, logs, HTTP, LLM prompts, and scoped MCP tool boundaries.

Auditable, token-gated DeepSeek Harness remote gateway: mobile QR access, per-device sessions, Host/Origin rewrite, settings/credentials/dir

AI-Powered Offensive Security Research Engine - desktop-native security testing platform with native MCP integration. 90 tools, MITM proxy,

Every live OMP session. One private page, in any modern browser.

The AI security agent guards your code.

One command. Full stack. Zero compromise. — All-in-one Claude Code skill with 33 modes, 6-layer security, 23 hooks, and 75% token savings

Network-wide ad & tracker blocking DNS server. Go backend, React dashboard, 200K+ blocked domains, real-time analytics via WebSocket.

Hide Your TailwindCSS 👀

Cryptographic trust and authorization evidence for AI agents. Every action a receipt, every grant a proof.

A codebase scanner that helps you not run malicous code

Automatic, model-driven permission review for OpenCode

Free client-side password and key generator for secure passwords, API keys, UUIDs, JWT secrets, and encryption keys. Powered by the Web Cryp

DropLink is a decentralized, temporary peer-to-peer sharing platform. Files, folders, links, and chat messages move directly between browser

OSS license watchdog. Monitors GitHub repos you depend on and alerts you when a license changes, explaining exactly what you can no longer d

Styx is where everything converges: every repo you work in, the AI coding agents building in them, and every login they need to ship. Switch

Claude Code Architecture Deep Analysis — 14-chapter report, 7 languages | Claude Code 架构全景分析 — 14章报告，7种语言

Guided VEX authoring for OSS maintainers — from zero to a published VEX document in one command.

See why a web vulnerability works, not just how to trigger it — a single-file, zero-dependency security lab that renders a vulnerable app as

Assume any role, any cloud. Short-lived AWS, Azure, and Google Cloud credentials for your tools.

easybackend.js is a developer-friendly backend DSL and framework for building Node.js/Express APIs with validation, auth, database, and secu

Your SvelteKit app's code health, checked before it ships. Statically, no browser — SEO, Performance, Correctness, Security, Architecture, A

Git-aware secret & .env leak guard for TypeScript/Node — sub-second pre-commit scanning with the lowest false-positive rate.

Bounded repository context and verified patches for Codex and Claude Code. Explicit edit grants, source fingerprints, isolated worktrees, ac

Claude and ChatGPT now log into your app as your customers. OneHuman decides what they can see and do. Join our community: https://discord.g