ice-tea #pentest
AI-Powered Static Application Security Testing (SAST) — written in Go.

https://github.com/zakirkun/ice-tea

planshield #exploit
Render a Terraform plan into a minimal, safe-to-share change list. Groups resources by action, redacts secrets, outputs Markdown or JSON for PR comments and CI.

https://github.com/MatusPohorenec/planshield

CVE-2026-2991 #exploit
PoC exploit for CVE-2026-2991 — authentication bypass in KiviCare WordPress plugin (≤4.1.2) allowing unauthenticated patient account takeover and admin session extraction.

https://github.com/joshuavanderpoll/CVE-2026-2991

CVE-2025-5548-Exploit-Development #exploit #scanner
Practical lab focused on vulnerability analysis and exploit development, using FreeFloat FTP Server 1.0 as an educational buffer overflow case study and documenting the setup, analysis and exploita...

https://github.com/grospomg/CVE-2025-5548-Exploit-Development

cve-2025-5548-freefloat-ftp-walkthrough #exploit
Documentación paso a paso del análisis y la explotación controlada de la CVE-2025-5548 en FreeFloat FTP Server 1.0, incluyendo preparación del entorno, análisis técnico, desarrollo del exploit y va...

https://github.com/gumbita/cve-2025-5548-freefloat-ftp-walkthrough

pentest-kit #pentest
Tool-orchestrated penetration testing framework for Claude Code. DAST + SAST + SCA in a hardened Docker container.

https://github.com/nunenuh/pentest-kit

evilwaf #web
evilwaf is a penetration testing tool designed to detect and bypass common Web Application Firewalls (WAFs).

https://github.com/matrixleons/evilwaf

bounty-radar #bugbounty #exploit #web
Bug bounty research tool — search HackerOne reports, Immunefi Web3 programs, GitHub security resources.

https://github.com/xnotok-ops/bounty-radar

Neuron #osint
Osint and Network tools

https://github.com/yuvalmalkan/Neuron

flex-security-scanner-nuxg #scanner
Automated issue comment bot repository

https://github.com/TeleAI-mcp/flex-security-scanner-nuxg

vibesafe-action #scanner
Free security scanner for AI-generated code. SAST + secret detection on every PR. 24-line YAML, 30-second setup. Built for vibe coding.

https://github.com/vibesafeio/vibesafe-action

Awesome-OpenClaw #exploit
A carefully curated list of awesome OpenClaw resources — not everything, just the best. Skills · Plugins · MCP · Tools · Deployments · Security · Research · Alternatives。精心策划的 OpenClaw 优质资源大合集 —— ...

https://github.com/EthanYolo01/Awesome-OpenClaw

BLTools_Checker_2026 #cloud #osint
BlTools Professional: Advanced Multi-Service Data Auditor & Log Processing Suite. High-speed automated verification for Cloud Services, Crypto Wallets, and Social Platforms. Features multi-threaded...

https://github.com/mistieflyingjoe/BLToolsChecker2026

jar-analyzer-engine #web
Java bytecode analysis engine built on ASM, extracts method call graphs, inheritance trees, Spring routes, and string constants from JAR/WAR into SQLite. AI-friendly output for security auditing.

https://github.com/jar-analyzer/jar-analyzer-engine

wp-static-exporter #ad
A WordPress plugin that converts dynamic sites into static HTML and deploys them to modern hosting platforms, delivering faster load times, enhanced security, and scalable infrastructure.

https://github.com/jonathan-arredondo-calle/wp-static-exporter

Go-PGX-Vulnerability-POC-Public-Mirror #exploit #scanner #web
Public mirror of Proof-of-Concept for CVE-2024-27304, with working exploit scripts for both custom web app platform and Harbor.

https://github.com/flying-owl/Go-PGX-Vulnerability-POC-Public-Mirror

digital-war-room #osint
Multi-agent platform using OSINT tools to create geopolitical analysis

https://github.com/lina767/digital-war-room

GHOSTRACE #exploit #osint #scanner
Discover detailed OSINT data by scanning usernames, emails, domains, and networks across multiple sources with GHOSTRACE’s advanced tools.

https://github.com/Themansd/GHOSTRACE

Digital_footprint_scanner #osint #recon #scanner
Footprint-MVP is an automated OSINT reconnaissance tool designed to map a user's digital footprint and calculate a cybersecurity risk score. Built with FastAPI, Celery, and Redis, it performs activ...

https://github.com/anityu45/Digitalfootprintscanner

attack-surface-toolkit #osint #recon #web
Passive Attack Surface Toolkit — module-based passive OSINT recon for web domains. Runs non-destructive subdomain/DNS/WHOIS/SSL/header/wayback/tech discovery, maps depth‑1 surface, computes a 0–100...

https://github.com/SagarBiswas-MultiHAT/attack-surface-toolkit

vet-skill #scanner
A pre-installation security scanner for agentic skill files and rule files. A single markdown prompt that detects prompt injection, credential exfiltration, invisible Unicode attacks, and other mal...

https://github.com/fasutron/vet-skill