Havuz

REA, coding agents aracılığıyla uygulamaları ve native binary'leri inceleyip bulguları yapılandırılmış kanıtlarla sunan bir reverse-engineering aracıdır.

Neden yükseliyor · Agent'ları reverse-engineering araçlarına bağlayan bütünleşik bir CLI/MCP iş akışı sunması ilgi çekiyor olabilir. 174 günde 2392 yıldız ve son 28 günde 108 commit kayda değer ilgi ve aktivite gösteriyor; ancak yalnızca 2 farklı yazar olması geliştirme faaliyetinin dar bir grupta toplandığını düşündürüyor.

nas: a zero-dependency Python CLI + MCP server for Synology DSM 7. One-command audit and fix for the C3RB3R / .L0CK3D ransomware campaign; h

Codex Security, kod depolarındaki güvenlik açıklarını taramak, doğrulamak ve düzeltme önerileri sunmak için CLI ve TypeScript SDK sağlar.

Neden yükseliyor · 76 günlük yaşına karşın yüksek yıldız sayısı ve son 28 gündeki 188 commit ile 20 farklı yazar, belirgin ilgi ve aktif geliştirme gösteriyor; OpenAI markası da görünürlüğüne katkıda bulunabilir. Bu veriler tek başına tarama kalitesini veya üretim ortamında benimsenmeyi kanıtlamaz.

OpenOSINT, OSINT araştırmalarını doğal dil üzerinden yürüten; REPL, CLI, Web UI ve MCP arayüzleri sunan bir Python aracıdır.

Neden yükseliyor · 144 günlük yaşına karşılık 1.657 yıldız ve son 28 günde 30 commit, projeye yönelik ilgi ve yakın dönem geliştirme temposuna işaret ediyor; ancak farklı yazar sayısının 2 olması sürdürülebilirlik kanıtını sınırlıyor.

An AI that administers Linux through typed, approval-gated, Ed25519-audited actions. The model selects the action; the daemon builds the com

A gh CLI extension that generates and verifies the GitHub Actions dependency lockfile, pinning every action your workflows use to an exact c

Offline cyber security agent for your apps and AI coding tools. Open R&D: measured in public, improved every release.

3x more usage on your coding agent, same quality. Have an multi-agent setup in mind? Bello already supports it. Mix models, run agents in pa

OneCLI, ekiplerin çalışan başına sandbox içinde çalışan AI agent’ları merkezi politika ve credential kontrolüyle yönetmesini sağlayan açık kaynak bir platformdur.

Neden yükseliyor · Ekiplerin agent’ları gerçek sistemlere bağlama ihtiyacına, sandbox ve merkezi credential/policy yönetimini bir araya getiren bir ürünle yanıt veriyor. 203 günde 3.517 yıldız dikkat çekici ilgi gösteriyor; ancak ilginin hangi kanaldan geldiği veya benimsenmenin ne ölçüde üretim kullanımına dönüştüğü verilen verilerden anlaşılmıyor. Son 28 gündeki 12 commit ve 4 farklı yazar, projenin aktif geliştirildiğine dair sınırlı ama olumlu kanıt.

Sandbox for AI coding agents (Claude Code, opencode, pi): runs each project in an isolated microVM with host-side secret injection. Linux/KV

给 AI 生成代码做安全审阅的终端工具：410 条漏洞清单，20 条本地规则 + 模型逐条判定（带证据核实），看完 diff 再决定要不要写（Rust）

Open source agentic SAST. The engine behind hundreds of disclosed zero-days. 100+ AI security agents, any repo or PR diff, bring your own mo

WireGuard, AmneziaWG, Cisco AnyConnect and Tailscale in one native, free and open-source macOS VPN client: SwiftUI app, Network Extension, k

Local traffic visibility and privacy controls for coding agents. See what Claude Code, Codex and Copilot send to the model; mask secrets and

Audits AUR PKGBUILD updates before you install: detects structural changes, suspicious commands, typosquatting, and novelty signals, then pr

Grepleaks — your AI pentest environment. An AI pentest agent that lives in your terminal.

An AI chat agent (harness) with integrated tools, skills and an optional knowledge base. Chat with any OpenAI-compatible LLM, use built-in i

LAN Sheriff watches which servers your network talks to. Self-hosted, no account. Observes only; blocks nothing. Built by 291 Group.

Paste a redacted copy of your clipboard with one hotkey. Hides API keys, tokens, passwords and PII (900+ patterns) before they reach AI chat

Fast, self-contained vulnerability scanner (single Go binary) for web apps, APKs and binaries - extensible with JSON and nuclei YAML templat

Sandbox for running AI coding agents autonomously: isolated, network-restricted, host-safe

A fast, keyboard-driven HTTP intercepting proxy and pentesting toolkit for the terminal built for humans and AI agents alike.

A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.

Terminal UI to manage SSH keys, edit ~/.ssh/config, and audit your SSH security. Encrypted metadata + backups, an A–F security grade, byte-i

Automatic, model-driven permission review for OpenCode

Deterministic security analysis for Stellar Soroban smart contracts and Rust projects.

Catch .env secrets leaking into git: a pre-commit hook and CLI that fails when an API key or any value of your env files is staged, tracked

Lightweight, cross-platform process sandboxing powered by OpenAI Codex's runtime. Sandbox any command with file, network, and credential con

Remove metadata from photos, PDFs, Office documents, audio and video. Strips EXIF, GPS location, camera serial numbers, author names and tim

C2 server fingerprinter — Cobalt Strike, Sliver, Mythic, Havoc, Brute Ratel

No WiFi? Now WiFi. One command. 27 techniques. Bypass any captive portal.

A fast universal code security scanner, written in Rust. Batteries included: supports 14 languages, TUI for triage, secrets, post-quantum au

Docker sandbox for the Claude Code CLI. Runs Claude against one project folder — including with --dangerously-skip-permissions — while your

Contract intelligence, inspection, interface analysis, compatibility, deployment verification, and reproducibility tooling for Stellar and S

Containment for AI agents - user isolation, sandboxed execution, network controls, backup/rollback. TLA+ verified.

Kubernetes security assessment CLI: RBAC, pod-escape, and privilege-escalation path analysis. Cloudsplaining for Kubernetes.

Find and redact secrets in AI coding agent histories (Claude Code, and more).

Audit and fix your Mac's security in one command. No agent, no signup, open source.

One command. 29 battle-tested security checks built into every AI coding assistant you already use without leaving your IDE.

Cache Commander — a TUI and MCP server to explore, audit, and clean developer cache directories. Scan for CVEs, find outdated packages, recl

Open-source AI-powered website audit CLI using the OpenAI API for SEO, UX, accessibility, performance, trust, and content analysis.

The AI security agent guards your code.

Orb44 Watch satellite - inside pulse from your VPS (load, listeners, hardening).

🔒 Jail OpenCode, Claude Code, Copilot CLI and OmO in micro-VMs: only your project folders, only the networks you allow.

🔐 The password manager for terminal users and AI agents. Age-encrypted, keyring-cached, MCP-ready. Zero telemetry.

Keyed reversible source code obfuscator for Rust: syntactically valid, functionally identical, spiritually hostile.

Run a command in a sandbox with the same flags on every OS — one capability model compiled to Seatbelt (macOS), gVisor (Linux), and AppConta

A secure, production-ready Python CLI wrapper for Nmap that makes powerful scans easy and repeatable. Includes 12 built-in profiles (SYN, ag

Guardrails for AI coding agents — block catastrophic tool calls before they run. Semantic, agent-neutral, near-zero false positives.

Supply-chain attack scanner for the agent era. Triage in 30s with `npx patient-zero`, block malicious installs before postinstall runs, or d