AI Agent Security Cheat Sheet 🤷‍♂️

AI agents are autonomous systems powered by Large Language Models (LLMs) that can reason, plan, use tools, maintain memory, and take actions to accomplish goals. This expanded capability introduces unique security risks beyond traditional LLM prompt injection. This cheat sheet provides best practices to secure AI agent architectures and minimize attack surfaces 🤖

Github 📱

#Cheat_sheet #llm #cybersecurity #infosec #ai

🏷 @RootAccessClub
🏷 @BugCod3

burp ai agent - The bridge between Burp Suite and modern AI ⌨️

Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more

💤59 MCP Tools
💤62 Vulnerability Classes
💤Burp Scan Skill
💤3 Privacy Modes
💤11 AI Backends
💤Available on the BApp Store

Github 🐱

#BurpSuite #Ai #Pentesting #pentest #BugBounty #Burp_plugin

🛩 @BugCod3
🛩 @RootAccessClub

WebVM 🤔

Run a Linux virtual machine in your browser 💸

GitHub 🐱

#linux

✈️ @RootAccessClub
✈️ @BugCod3

Ethical Hacking Labs ☑️

This is a collection of tutorials and labs made for ethical hacking students, cybersecurity students, network and sys-admins. These tutorials accompany the resources of CEH content and different resources across the internet 🔖

Github 🐱

#CEH #learning

💎 @RootAccessClub
💎 @BugCod3

Certified Penetration Tester (CPENT) Collection 👑

Download ⬇️

#free #CPENT #learning #Pentesting

⚡️ @RootAccessClub
⚡️ @BugCod3

OASIS – Ollama Automated Security Intelligence Scanner 🧠

An AI powered security auditing tool that leverages Ollama models to detect and analyze potential security vulnerabilities in your code

GitHub 🧑‍💻

#Ai #Ollama #CyberSecurity
#Tools

🌟@RootAccessClub
🌟@BugCod3

nRFBOX 📱

Open source ESP32 powered tool to scan, jam, spoof, and master BLE, Wi-Fi, and 2.4GHz networks 🤔

GitHub 💻

💎 @RootAccessClub
💎 @BugCod3

VICE 🤔

VICE is a security auditing CLI tool that finds vulnerabilities in your web applications 🤔

GitHub 🐱

#Tools #CyberSecurity

🏳️ @RootAccessClub
🏳️ @BugCod3

Microsoft Activation Scripts (MAS) 💻

Open source Windows and Office activator featuring HWID, Ohook, TSforge, and Online KMS activation methods, along with advanced troubleshooting 🗝

How to Activate ❓

1️⃣Click the Start Menu, type PowerShell and open it

2️⃣Copy and paste the code below and press Enter

irm https://get.activated.win | iex 

If the above is blocked (by ISP/DNS), try this (needs updated Windows 10 or 11):

iex (curl.exe -s --doh-url https://1.1.1.1/dns-query https://get.activated.win | Out-String)

Github 📱

#windows #microsoft #Office

🏷 @RootAccessClub
🏷 @BugCod3

Kali Linux 2026.2 Release 💠

🔥 Desktop Environments - Bump to GNOME 50 and KDE Plasma 6.6

🔥 Helper Scripts Consistency - Consistency to our little launches at starting services

🔥 APT Format - Goodbye sources.list, hello sources.list.d/kali.source

🔥 VM Boot Optimisation - Smaller initrd + faster boot times = happy virtual machine users

🔥 Reboot Warning - Heads-up, polkit and xrdp upgrades require a system reboot

🔥 Kali Kernel Incoming - Staying with 6.19 for now, how to get 7.0 early

🔥 Build Scripts Incoming - Heads-up with some changing on the way

🔥 New Tools - As always, various new shiny packages have been added

Using Kali already❓ Great You can keep it up to date by doing:

┌──(kali㉿kali)-[~]
└─$ sudo tee /etc/apt/sources.list.d/kali.sources << 'EOF'
Types: deb
URIs: http://http.kali.org/kali/
Suites: kali-rolling
Components: main contrib non-free non-free-firmware
Signed-By: /usr/share/keyrings/kali-archive-keyring.gpg
EOF
[...]

┌──(kali㉿kali)-[~]
└─$ sudo apt update && sudo apt -y full-upgrade
[...]

┌──(kali㉿kali)-[~]
└─$ cp -vrbi /etc/skel/. ~/
[...]

┌──(kali㉿kali)-[~]
└─$ sudo reboot -f

#linux #kali #kali_linux

💎 @RootAccessClub
💎 @BugCod3

BladeRecon 🗡

BladeRecon is a lightweight reconnaissance framework for bug bounty, web pentesting, and reporting focused attack surface discovery 🤕

Github 💻

#Pentesting #Bugbounty

😎 @RootAccessClub
😎 @BugCod3

arsenal-ng 🔻

Modern pentest command launcher written in Go 👩‍💻

The classic launcher, evolved. Fast, Go-based command library equipped with 200+ cybersecurity cheat-sheets. Just install and start hacking 🟢

Github 🐱

#golang #go #pentesting #pentest

💎 @RootAccessClub
💎 @BugCod3

Full Bug Bounty Hunting & Red Teamers Methodology 2️⃣0️⃣2️⃣6️⃣

Created by Cybernote, aspiring Red Team Operator and Bug Bounty Hunter. This repository documents my methodology, notes and workflow for web application security testing⚡️

GitHub 🐱

#bug_bounty #bugbounty #RedTeam

🛫@RootAccessClub
🛫@BugCod3

Netryx Astra V2 ⚡️

Find Any Location from a Single Image with AI ⏳

Github ☁️

#Ai #Tools

🟣 @RootAccessClub
🟣 @BugCod3

SpideyX 🕷

SpideyX a multipurpose Web Penetration Testing tool with asynchronous concurrent performance with multiple mode and configurations 🤩

Github 🐱

#Tools #Pentest #pentesting

🕷️@RootAccessClub
🕷️@BugCod3

📶 WEF — WiFi Exploitation Framework

An open-source framework for WiFi security testing, combining manual and automated techniques for assessing WPA/WPA2, WPS and WEP networks across 2.4GHz and 5GHz bands 🛜

🐱 GitHub

💎 @RootAccessClub
💎 @BugCod3

Complete cybersecurity course 😎

Download ⬇️

#Free #CyberSecurity

🌟@RootAccessClub
🌟@BugCod3

LegacyHive – Windows user profile service arbitrary hive load elevation of privileges vulnerability ☑️

The PoC requires another standard user credentials and a third username (which can be an administrator account), if the PoC is successful, it will end up mounting the target user hive in current user classes root 🔹

Github 📱

✈️ @RootAccessClub
✈️ @IRSentinels

CVE-2026-63030: wp2shell ⚠️

a critical remote code execution vulnerability in WordPress core 🌐

💎@RootAccessClub

wp2shell poc ⛔️
➖➖➖➖➖➖
Independent proof-of-concept for the unauthenticated WordPress REST batch route-confusion SQL injection associated with Searchlight Cyber's wp2shell advisory ⏺
➖➖➖➖➖➖➖➖➖
GitHub 🐱
➖➖➖➖➖➖➖➖➖
For educational purposes only. Use at your own risk ⚠️
➖➖➖➖➖➖➖➖➖
✈️ @RootAccessClub

PoC and vulnerable Docker environment to test wp2shell 🧪

GitHub 💻

🏳️ @RootAccessClub