nodatachat-core #pentest
Secure, zero-trace secret sharing library. Encrypt and share secrets via CLI without servers ever seeing your data.

https://github.com/daviderez4/nodatachat-core

OpenShell #exploit
OpenShell is a lightweight, open-source reverse shell management server written in Go.

https://github.com/iss4cf0ng/OpenShell

BeyWallet #pentest
Modular, Local-First Cashu & Nostr Wallet. Direct Bitcoin ecash payments with hardware-level security.

https://github.com/thehussein01/BeyWallet

API-PENTESTER #exploit #scanner
Agentic API pentesting engine that reads your API documentation and autonomously hunts for deep-seated logic vulnerabilities. Open-source and context-aware

https://github.com/SecNode/API-PENTESTER

mcp-security-checklist #pentest
MCP is being adopted rapidly. Security guidance is lagging behind. This checklist gives security engineers, platform teams, and technical leaders a clear, actionable baseline for securing MCP deplo...

https://github.com/Helixar-AI/mcp-security-checklist

Moniker-Link-Lab-Setup #exploit #password
Penetration testing lab demonstrating CVE-2024-21413 moniker link exploitation for NTLM credential theft, including attack execution, hash cracking, and defensive countermeasures

https://github.com/E-m-e-k-a/Moniker-Link-Lab-Setup

CVE-2024-51482-ZoneMinder-v1.37.-1.37.64-SQL-Injection-POC #exploit
ZoneMinder Time-Based SQL Injection (CVE-2024-51482) Exploit POC

https://github.com/Ravi-lk/CVE-2024-51482-ZoneMinder-v1.37.-1.37.64-SQL-Injection-POC

CVE-2024-4367-pdfjs-exploit #exploit
A proof of concept and analysis of CVE-2024-4367, the PDF.js arbitrary javascript execution exploit

https://github.com/John-Popovici/CVE-2024-4367-pdfjs-exploit

CVE-2025-60787 #exploit
PoC for CVE-2025-60787 - Authenticated RCE in motionEye for all versions up to 0.43.1b4 (included)

https://github.com/gunzf0x/CVE-2025-60787

BlackBunning #bugbounty
Advanced Bug Bounty Automation Tool for Kali Linux

https://github.com/abhishekxploit/BlackBunning

Bug-Bounty-Tools #bugbounty
My custom scripts for bug bounty hunting

https://github.com/K9ineX3D/Bug-Bounty-Tools

blackroad-vulnerability-scanner #scanner
🛣️ 🛡️ Security scanning

https://github.com/BlackRoad-OS/blackroad-vulnerability-scanner

ip-analyze #osint
🐍 Simple IP OSINT & Analysis Tool by Dany La Parca

https://github.com/danyparca/ip-analyze

cloud-posture-scanner #cloud #scanner
Serverless AWS Security Posture Scanner using Lambda, API Gateway & DynamoDB.

https://github.com/Ayushi1912-dev/cloud-posture-scanner

bv-mcp #cloud #exploit #recon #scanner
Open-source DNS & email security scanner. One MCP endpoint, 57 checks, zero install. Cloudflare Workers.

https://github.com/MadaBurns/bv-mcp

SecAI-Nexus #osint
SecAI-Nexus is a free, centralized dashboard that delivers real-time cyber threat intelligence — giving security and GRC professionals instant visibility into emerging attack vectors, AI-driven ris...

https://github.com/adamkistler98/SecAI-Nexus

product-sbom-vex #pentest
Last Mile EU CRA Compliance Tooling. Bring your own build SBOMs to generate product level SBOM and VEX based on CSAF 2.0

https://github.com/PrismorSec/product-sbom-vex

iready-hack-2026 #exploit
Best opensource iready hack 2026. Full instructions on app, easy setup

https://github.com/zerogarnet/iready-hack-2026

smart-id-card-generator #pentest
An advanced digital solution for organizations to design and issue high-security identification cards with integrated chip encoding and dynamic QR code support.

https://github.com/bransserenade40/smart-id-card-generator

shannon #pentest
Skill for Automated Pentesting from Keygraph Shannon

https://github.com/unicodeveloper/shannon

vigil #pentest
The Security Agency That Never Sleeps — AI-powered security operations platform

https://github.com/vigil-agency/vigil