Havuz

Passive Bluetooth neighbourhood monitor for Raspberry Pi and Linux: a live radar, device triage, categories and alerts for new devices.

AI-powered MCP server for Burp Suite Professional — 149 tools across proxy, scanner, inline fuzzer, race conditions, guided injection, JWT/I

Proper sandboxing for agentic coding and web browsing

JsOwl —— Go 编写的 Web 安全信息收集利器。集 JavaScript 信息收集、API 端点提取、敏感信息扫描、攻击面梳理 于一体，同时提供 CLI 工具与 Go 库。内置 direct / browser / auto 三种采集模式，兼容 HaE 规则，支持登录态

A privacy-first, local-first password manager with cross-platform synchronization.

Runtime security for AI agents: discover agents, map their permissions, and enforce what they can do.

Reverse engineering skill for Claude Code and other AI coding agents.

Static reverse engineering of untrusted files with verifiable, byte-anchored evidence. Open tools (Ghidra, JADX, LIEF, YARA-X, Babel) in loc

Static decompiler, deobfuscator, and unpacker for reverse engineering and malware analysis: Python decompiler (3.8-3.15), PyInstaller extrac

Offline password, identity, and secret vault. Argon2id + AES-256-GCM, zero servers, zero telemetry.

Your app is guilty until proven secure: an agent skill whose /hack-me breaks into your own running app, proves each bug with a real request,

Open-source, self-hosted attack surface management platform with distributed agents for asset discovery, scan orchestration, and vulnerabili

Wazuh MCP Server: AI-Driven SOC Automation

A codebase scanner that helps you not run malicous code

Open-source local AI Agent desktop app for authorized security assessment — Electron + Mastra-powered runtime, visual pentest workflow, Kali

Browser-based Android console, APK decompiler and security analyzer. Mirror, logcat, shell, Frida, jadx, and static and dynamic analysis, wi

Laravel Security Tool

AI-powered multi-agent security auditor for Symfony applications, provider-agnostic via symfony/ai.

Autonomous agent that mines Java deserialization gadget chains from any JAR directory. Static bytecode analysis + dynamic JVM probes + dual-

Rust 跨平台应急响应分析工具，提供 CLI 与桌面 GUI；支持日志、进程和离线流量分析、案件项目管理、IOC 匹配、AI 辅助分析、报告导出及 Windows/Linux 应急命令速查。支持 Windows、Linux、macOS ARM64。

基于多智能体架构与自主决策机制，配合大语言模型的理解能力，输入自然语言指令，AI 自动完成从目标侦察到漏洞验证的完整渗透测试流程。

Kubernetes security assessment CLI: RBAC, pod-escape, and privilege-escalation path analysis. Cloudsplaining for Kubernetes.

An informational platform that provides live GitHub data for programming languages, frameworks, libraries, and database technologies. This p

Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see y

Verify what AI coding agents can actually read, write, execute and reach using synthetic canaries.

27 scope-enforced AI agents that run the full pentest kill-chain (recon → exploit → post-ex → DFIR → report) as a one-command Claude Code pl

Audit and fix your Mac's security in one command. No agent, no signup, open source.

A modular, drop-in middleware collection for Laravel AI SDK agents. Offers middleware across security, observability, performance and guidan

LLM-native static vulnerability detection: point it at a repo and get a reviewable vuln report, the way a human auditor would.

Local-first offensive security engagement platform for mapping assets, credentials, sessions, pivots, findings, evidence, and attack paths.

Behavioral-discipline skill turning an AI agent into a methodical, non-robotic bug-bounty & pentest hunter - 42 always-on rules: scope, cove

Fast, cross-platform CLI for finding secrets and sensitive data across filesystems, SMB, Active Directory, Microsoft 365, Slack, Jira and Co

Audits AUR PKGBUILD updates before you install: detects structural changes, suspicious commands, typosquatting, and novelty signals, then pr

AI-powered SAST scanner that finds auth bypass, IDOR, and logic bugs Semgrep/CodeQL miss. Free GitHub Action. Supports Python, JS/TS, Go, PH

A lightweight Windows PC remote screen monitoring and endpoint activity audit tool. Fast setup, live screen streaming, and silent background

👻 AI-Powered Pentesting Command Center — Autonomous security testing with real-time streaming, self-improving AI, unlimited tool iterations,

A lightweight network security tool that verifies IP location, validates network safety, and prevents access to protected links when unexpec

Jadart is a fast Flutter decompiler designed for Agents/Mobile Security Researchers.

Deterministic security analysis for Stellar Soroban smart contracts and Rust projects.

⚔️ Suite de hacking ético 100% client-side: +100 herramientas de ciberseguridad, forense, ingeniería inversa y anti-phishing que corren en t

Observe AI agent runs and control consequential actions. Signed policies, exact-action approvals, AuthZEN API vetoes and evidence. MCP gatew

MCP server bridging Claude/any LLM client to a persistent Kali Linux VM over SSH — scope-gated nmap, gobuster, nuclei & nikto with structure

OSINT tool for precise version fingerprinting of open-source web software

❄️ Static, serverless CVE radar — every new CVE from the last 30 days, ranked by real-world risk (KEV · EPSS · PoC · Metasploit · Nuclei · S

Advanced web security scanner with 49 modules, evasion engine, and CVE database.

Install, run and verify OSINT tools from GitHub automatically, on any OS

A small multithreaded TCP port scanner in plain C (POSIX sockets + pthreads), zero dependencies.

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix the

Modular browser-based OSINT toolkit — curated search tools, PII Redactor, multi-country IBAN analysis and embedded CyberChef. No backend req

Scan, fuzz, and assess OT protocols from one CLI.