ethical-hacking-writeups #pentest
Personal cybersecurity notes — no spoilers, just methods, insights, and tools. Focused on practical learning, clean documentation, and long-term skill building. Each entry is a quick breakdown of ...

https://github.com/cookiesn1ffer/ethical-hacking-writeups

NoirRecon #bugbounty #recon #web
Automated recon tool for Bug Bounty and penetration testing using subfinder, httpx and nuclei.

https://github.com/GabrielCMN444/NoirRecon

GuardLens-Security-Scanner #scanner
GuardLens: Next-Gen Web Security Auditor

https://github.com/ahmadfaraz-ansari/GuardLens-Security-Scanner

vibecheck #scanner
Security scanner for vibe-coded projects. Semgrep + Gitleaks + AI-powered review with one-click Cursor fix prompts.

https://github.com/mojito09/vibecheck

agentseal #pentest
Security validator for AI agents - find out if your agent can be hacked

https://github.com/AgentSeal/agentseal

ADTools #ad
ADTools - Hacking Active Directory

https://github.com/XK3NF4/ADTools

openclaw-simplex #pentest
SimpleX channel plugin for OpenClaw.

https://github.com/dangoldbj/openclaw-simplex

KeyReaper #bugbounty #cloud #web
Extract and assess exposed Google Cloud (AIza) API keys from web pages. Built for bug bounty hunters and security researchers.

https://github.com/gotr00t0day/KeyReaper

clawsight-siem #cloud
SIEM for AI agents. Execution-centric security and observability control plane for OpenClaw.

https://github.com/cantinaxyz/clawsight-siem

cloudsecure #cloud
AWS security assessment platform with AI-powered analysis

https://github.com/carlosinfantes/cloudsecure

clawsight-plugin #cloud
EDR for AI agents. Security guardrails and telemetry plugin for OpenClaw.

https://github.com/cantinaxyz/clawsight-plugin

nullsec-freakshow #pentest
🎪 The Freakshow Suite — 30 Weird & Creepy Security CLI Tools | Python + Click | bad-antics

https://github.com/bad-antics/nullsec-freakshow

ShadowPort #recon #scanner
ShadowPort v3.1 is a custom-built Python port scanning tool created for ethical hacking and network enumeration. It helps identify open ports and analyze network exposure, making it useful for cybe...

https://github.com/amal0923/ShadowPort

duplicate-bug-report-resolver #bugbounty #scanner
A tool to help bug bounty hunters and security researchers resolve duplicate bug report issues on platforms like HackerOne. This repository provides a suite of tools and APIs to automatically detec...

https://github.com/automate-it0/duplicate-bug-report-resolver

Sentinel #scanner
Sentinel - Professional, high-performance network port scanner written in C++17. Designed for security professionals, system administrators, and network engineers.

https://github.com/djhelski/Sentinel

CODTECH-Cybersecurity-Internship #scanner #web
Cyber Security Internship project by Vaishali B R including File Integrity Checker, Web Vulnerability Scanner, Penetration Testing Toolkit, and AES-256 Encryption Tool built using Python.

https://github.com/vaishalibr2005/CODTECH-Cybersecurity-Internship

tooltrust-scanner #scanner
Security scanner and trust gateway for AI agent tool ecosystems — detects prompt injection, permission abuse, and scope mismatches in MCP servers, OpenAI tools, and Skills

https://github.com/AgentSafe-AI/tooltrust-scanner

Web-session-security-scanner #scanner #web
A Python tool that scans websites for session hijacking vulnerabilities — checks cookies, security headers and session tokens based on OWASP guidelines.

https://github.com/kartikrosn/Web-session-security-scanner

rust-scanner #scanner
Scanrook is a cli tool that scans anything with high accuracy and speed

https://github.com/devinshawntripp/rust-scanner

WhoIsMoni #web
WhatsApp Web phishing page for authorized pentesting. Captures international phone numbers + OTP codes with pixel-perfect 2026 UI. Real-time logging, 20+ countries, mobile-responsive.

https://github.com/codingcreatively/WhoIsMoni

remote-script-swap-demo #ad #exploit #password
Security demo showing how a trusted remote PowerShell script can be silently swapped when served from a mutable source. The import tutorial at wuwatracker.com does NOT do this and uses hashed URLs ...

https://github.com/wuwatracker/remote-script-swap-demo