phantom-ethical-redteam #web
An autonomous agent that acts as a DEF CON-level Certified Ethical Hacker, using tools such as Nuclei, sqlmap, ffuf, Burp, ZAP, and the Social Engineering Toolkit (SET), (labs, CTFs, HackTheBox, Tr...

https://github.com/kmdn-ch/phantom-ethical-redteam

GoTools #bugbounty
Herramientas para bug bounty en GO

https://github.com/luis-lucif/GoTools

MCP-Lattice #scanner
Security scanner for Model Context Protocol (MCP) with capability graph analysis. Detects emergent attack chains across multi-server AI agent deployments that no individual tool scan can find.

https://github.com/panavinsingh/MCP-Lattice

Recovery-Tool-For-Wallet-2026 #pentest
A high-performance research framework designed to demonstrate the security of BIP-39 mnemonic phrases and private key generation. This tool is built for educational purposes to analyze the entropy ...

https://github.com/pharaonland84/Recovery-Tool-For-Wallet-2026

StratusIQ #cloud #osint #scanner
StratusIQ is an intelligent cloud infrastructure platform that not only detects issues but also fixes them. It scans environments, analyzes Terraform, and identifies cost, security, and reliability...

https://github.com/dharshini1316/StratusIQ

neurogent #exploit
The open-source framework and CLI for building, packaging, and deploying A2A-compliant AI agents — with built-in Praesidia security.

https://github.com/praesidia-ai/neurogent

wstg-pentest-tracker #pentest
bash

https://github.com/rafaelchriss/wstg-pentest-tracker

Solidity-AI-security-auditor #pentest
bash

https://github.com/KannAILabs/Solidity-AI-security-auditor

AI-Cloud-pentest-framework #cloud
云安全渗透测试框架 - 支持 AWS、Azure、GCP、阿里云、腾讯云、华为云的综合渗透测试工具和指南

https://github.com/cdxiaodong/AI-Cloud-pentest-framework

skills #scanner
CertiK skill collection for agent workflows: address risk checks, transaction tracing, project scoring, and token security scans.

https://github.com/CertiKDev/skills

ice-tea #pentest
AI-Powered Static Application Security Testing (SAST) — written in Go.

https://github.com/zakirkun/ice-tea

planshield #exploit
Render a Terraform plan into a minimal, safe-to-share change list. Groups resources by action, redacts secrets, outputs Markdown or JSON for PR comments and CI.

https://github.com/MatusPohorenec/planshield

CVE-2026-2991 #exploit
PoC exploit for CVE-2026-2991 — authentication bypass in KiviCare WordPress plugin (≤4.1.2) allowing unauthenticated patient account takeover and admin session extraction.

https://github.com/joshuavanderpoll/CVE-2026-2991

CVE-2025-5548-Exploit-Development #exploit #scanner
Practical lab focused on vulnerability analysis and exploit development, using FreeFloat FTP Server 1.0 as an educational buffer overflow case study and documenting the setup, analysis and exploita...

https://github.com/grospomg/CVE-2025-5548-Exploit-Development

cve-2025-5548-freefloat-ftp-walkthrough #exploit
Documentación paso a paso del análisis y la explotación controlada de la CVE-2025-5548 en FreeFloat FTP Server 1.0, incluyendo preparación del entorno, análisis técnico, desarrollo del exploit y va...

https://github.com/gumbita/cve-2025-5548-freefloat-ftp-walkthrough

pentest-kit #pentest
Tool-orchestrated penetration testing framework for Claude Code. DAST + SAST + SCA in a hardened Docker container.

https://github.com/nunenuh/pentest-kit

evilwaf #web
evilwaf is a penetration testing tool designed to detect and bypass common Web Application Firewalls (WAFs).

https://github.com/matrixleons/evilwaf

bounty-radar #bugbounty #exploit #web
Bug bounty research tool — search HackerOne reports, Immunefi Web3 programs, GitHub security resources.

https://github.com/xnotok-ops/bounty-radar

Neuron #osint
Osint and Network tools

https://github.com/yuvalmalkan/Neuron

flex-security-scanner-nuxg #scanner
Automated issue comment bot repository

https://github.com/TeleAI-mcp/flex-security-scanner-nuxg

vibesafe-action #scanner
Free security scanner for AI-generated code. SAST + secret detection on every PR. 24-line YAML, 30-second setup. Built for vibe coding.

https://github.com/vibesafeio/vibesafe-action