neurogent #exploit
The open-source framework and CLI for building, packaging, and deploying A2A-compliant AI agents — with built-in Praesidia security.

https://github.com/praesidia-ai/neurogent

wstg-pentest-tracker #pentest
bash

https://github.com/rafaelchriss/wstg-pentest-tracker

Solidity-AI-security-auditor #pentest
bash

https://github.com/KannAILabs/Solidity-AI-security-auditor

AI-Cloud-pentest-framework #cloud
云安全渗透测试框架 - 支持 AWS、Azure、GCP、阿里云、腾讯云、华为云的综合渗透测试工具和指南

https://github.com/cdxiaodong/AI-Cloud-pentest-framework

skills #scanner
CertiK skill collection for agent workflows: address risk checks, transaction tracing, project scoring, and token security scans.

https://github.com/CertiKDev/skills

ice-tea #pentest
AI-Powered Static Application Security Testing (SAST) — written in Go.

https://github.com/zakirkun/ice-tea

planshield #exploit
Render a Terraform plan into a minimal, safe-to-share change list. Groups resources by action, redacts secrets, outputs Markdown or JSON for PR comments and CI.

https://github.com/MatusPohorenec/planshield

CVE-2026-2991 #exploit
PoC exploit for CVE-2026-2991 — authentication bypass in KiviCare WordPress plugin (≤4.1.2) allowing unauthenticated patient account takeover and admin session extraction.

https://github.com/joshuavanderpoll/CVE-2026-2991

CVE-2025-5548-Exploit-Development #exploit #scanner
Practical lab focused on vulnerability analysis and exploit development, using FreeFloat FTP Server 1.0 as an educational buffer overflow case study and documenting the setup, analysis and exploita...

https://github.com/grospomg/CVE-2025-5548-Exploit-Development

cve-2025-5548-freefloat-ftp-walkthrough #exploit
Documentación paso a paso del análisis y la explotación controlada de la CVE-2025-5548 en FreeFloat FTP Server 1.0, incluyendo preparación del entorno, análisis técnico, desarrollo del exploit y va...

https://github.com/gumbita/cve-2025-5548-freefloat-ftp-walkthrough

pentest-kit #pentest
Tool-orchestrated penetration testing framework for Claude Code. DAST + SAST + SCA in a hardened Docker container.

https://github.com/nunenuh/pentest-kit

evilwaf #web
evilwaf is a penetration testing tool designed to detect and bypass common Web Application Firewalls (WAFs).

https://github.com/matrixleons/evilwaf

bounty-radar #bugbounty #exploit #web
Bug bounty research tool — search HackerOne reports, Immunefi Web3 programs, GitHub security resources.

https://github.com/xnotok-ops/bounty-radar

Neuron #osint
Osint and Network tools

https://github.com/yuvalmalkan/Neuron

flex-security-scanner-nuxg #scanner
Automated issue comment bot repository

https://github.com/TeleAI-mcp/flex-security-scanner-nuxg

vibesafe-action #scanner
Free security scanner for AI-generated code. SAST + secret detection on every PR. 24-line YAML, 30-second setup. Built for vibe coding.

https://github.com/vibesafeio/vibesafe-action

Awesome-OpenClaw #exploit
A carefully curated list of awesome OpenClaw resources — not everything, just the best. Skills · Plugins · MCP · Tools · Deployments · Security · Research · Alternatives。精心策划的 OpenClaw 优质资源大合集 —— ...

https://github.com/EthanYolo01/Awesome-OpenClaw

BLTools_Checker_2026 #cloud #osint
BlTools Professional: Advanced Multi-Service Data Auditor & Log Processing Suite. High-speed automated verification for Cloud Services, Crypto Wallets, and Social Platforms. Features multi-threaded...

https://github.com/mistieflyingjoe/BLToolsChecker2026

jar-analyzer-engine #web
Java bytecode analysis engine built on ASM, extracts method call graphs, inheritance trees, Spring routes, and string constants from JAR/WAR into SQLite. AI-friendly output for security auditing.

https://github.com/jar-analyzer/jar-analyzer-engine

wp-static-exporter #ad
A WordPress plugin that converts dynamic sites into static HTML and deploys them to modern hosting platforms, delivering faster load times, enhanced security, and scalable infrastructure.

https://github.com/jonathan-arredondo-calle/wp-static-exporter

Go-PGX-Vulnerability-POC-Public-Mirror #exploit #scanner #web
Public mirror of Proof-of-Concept for CVE-2024-27304, with working exploit scripts for both custom web app platform and Harbor.

https://github.com/flying-owl/Go-PGX-Vulnerability-POC-Public-Mirror