osint-phishing-walkthrough #exploit #osint
Investigating Email Phishing Campaigns with Free OSINT Tools A practical, tiered guide for identifying, analyzing, and escalating suspicious email threats using open-source intelligence resources —...

https://github.com/LaBestiaPR/osint-phishing-walkthrough

Diabolic_Peninsular_V17 #osint #web
🔥 DIABOLIC Peninsular: OSINT tool que analiza 60+ periódicos de la España peninsular para detectar patrones delictivos (robos, estafas, narcotráfico…). Rotación de User‑Agent, detección automática ...

https://github.com/Condor2026/DiabolicPeninsularV17

Port-Scanner #scanner
Scan networks for open ports and audit RDP credentials to identify security issues on Windows systems using Python 3.9 or higher.

https://github.com/illkat4889/Port-Scanner

vulnfix #scanner
VulnFix — AI Vulnerability Scanner. Automated security vulnerability detection and fix suggestions.

https://github.com/MukundaKatta/vulnfix

gatecheck #scanner
GateCheck — API Security Scanner. Automated API endpoint security testing and vulnerability detection.

https://github.com/MukundaKatta/gatecheck

agent-guard #scanner
Security scanner for agent configurations. Built and maintained by erron.ai.

https://github.com/erron-ai/agent-guard

PytthonPentestTools #pentest
Algumas ferramentas úteis durante a execução de um Pentesting

https://github.com/f7iger/PytthonPentestTools

Art3mis #web
External Pentesting tool with web Facing GUI

https://github.com/retrobytecybersecurity/Art3mis

phantom-ethical-redteam #web
An autonomous agent that acts as a DEF CON-level Certified Ethical Hacker, using tools such as Nuclei, sqlmap, ffuf, Burp, ZAP, and the Social Engineering Toolkit (SET), (labs, CTFs, HackTheBox, Tr...

https://github.com/kmdn-ch/phantom-ethical-redteam

GoTools #bugbounty
Herramientas para bug bounty en GO

https://github.com/luis-lucif/GoTools

MCP-Lattice #scanner
Security scanner for Model Context Protocol (MCP) with capability graph analysis. Detects emergent attack chains across multi-server AI agent deployments that no individual tool scan can find.

https://github.com/panavinsingh/MCP-Lattice

Recovery-Tool-For-Wallet-2026 #pentest
A high-performance research framework designed to demonstrate the security of BIP-39 mnemonic phrases and private key generation. This tool is built for educational purposes to analyze the entropy ...

https://github.com/pharaonland84/Recovery-Tool-For-Wallet-2026

StratusIQ #cloud #osint #scanner
StratusIQ is an intelligent cloud infrastructure platform that not only detects issues but also fixes them. It scans environments, analyzes Terraform, and identifies cost, security, and reliability...

https://github.com/dharshini1316/StratusIQ

neurogent #exploit
The open-source framework and CLI for building, packaging, and deploying A2A-compliant AI agents — with built-in Praesidia security.

https://github.com/praesidia-ai/neurogent

wstg-pentest-tracker #pentest
bash

https://github.com/rafaelchriss/wstg-pentest-tracker

Solidity-AI-security-auditor #pentest
bash

https://github.com/KannAILabs/Solidity-AI-security-auditor

AI-Cloud-pentest-framework #cloud
云安全渗透测试框架 - 支持 AWS、Azure、GCP、阿里云、腾讯云、华为云的综合渗透测试工具和指南

https://github.com/cdxiaodong/AI-Cloud-pentest-framework

skills #scanner
CertiK skill collection for agent workflows: address risk checks, transaction tracing, project scoring, and token security scans.

https://github.com/CertiKDev/skills

ice-tea #pentest
AI-Powered Static Application Security Testing (SAST) — written in Go.

https://github.com/zakirkun/ice-tea

planshield #exploit
Render a Terraform plan into a minimal, safe-to-share change list. Groups resources by action, redacts secrets, outputs Markdown or JSON for PR comments and CI.

https://github.com/MatusPohorenec/planshield

CVE-2026-2991 #exploit
PoC exploit for CVE-2026-2991 — authentication bypass in KiviCare WordPress plugin (≤4.1.2) allowing unauthenticated patient account takeover and admin session extraction.

https://github.com/joshuavanderpoll/CVE-2026-2991