contrastapi #exploit #osint #recon #scanner
Security intelligence API and MCP server for AI agents. 23 tools, 35+ endpoints: CVE/EPSS/KEV, domain recon, SSL, IP reputation, threat intel, email security, code scanning. Free, no signup.

https://github.com/UPinar/contrastapi

jsreaper #exploit #osint #recon
JS reconnaissance tool for hunting exposed secrets, source maps, and API keys from JavaScript files using Wayback Machine and Katana.

https://github.com/alonebeast002/jsreaper

foxguard #scanner
Security scanner as fast as a linter. 100+ built-in rules, 10 languages, sub-second scans. Rust + tree-sitter.

https://github.com/peaktwilight/foxguard

AI-Secure-Data-Intelligence-Platform #osint #scanner
An AI-powered security scanner that accepts multiple input types (text, files, logs, SQL), detects sensitive data and security risks using regex + AI, and returns a structured risk report with AI-g...

https://github.com/SakshiAwasthi19/AI-Secure-Data-Intelligence-Platform

security-scanner #scanner
Evidence-first executable supply-chain analysis harness

https://github.com/discordwell/security-scanner

skillscan-website #scanner #web
skillscan.sh — the official website for the SkillScan security scanner portfolio

https://github.com/kurtpayne/skillscan-website

Sentori #scanner
🛡️ Security scanner for AI Agents and MCP Servers — like npm audit for AI

https://github.com/TakumaLee/Sentori

android-vuln-scanner #exploit #scanner
Android app that scans your device for security vulnerabilities, risky apps, weak network config, and CVEs

https://github.com/ehansih/android-vuln-scanner

security-scanner #scanner #web
Static security scanner purpose-built for AI-generated web app code

https://github.com/nometria/security-scanner

DevSecOps-pipeline #cloud #scanner #web
DevSecOps pipeline is a security scanner for scanning the vulnerabilities in cloud IaC and Web app codes that are pushed to Githubs.

https://github.com/Sahilmir18/DevSecOps-pipeline

network-vulnerability-scanner #exploit #scanner #web
Automated network security assessment tool — performs port scanning, SSL/TLS analysis, web app header checks, and CVE detection via Nuclei. Generates professional PDF reports. Built with Python, Nm...

https://github.com/Kushh111/network-vulnerability-scanner

galiyuk #bugbounty
tools bug bounty by holl.ez

https://github.com/tokupens/galiyuk

Vulnchain #scanner
AI-powered multi-language security scanner: 154 Semgrep rules, 13 Joern CPG scripts, AI code detection, and attack-chain correlation

https://github.com/hamzamiladin/Vulnchain

gws-auditor #exploit
Open-source Google Workspace security posture assessment tool. Audit your GWS tenant against CIS Benchmarks, CISA SCuBA Baselines, and industry best practices.

https://github.com/argusssec-cloud/gws-auditor

SQL_Injection_tool #exploit
Advanced SQL Injection Testing Tool in Python: blind/time/error-based, UNION helper, forms auto-detect, Playwright support.

https://github.com/sudoxs/SQLInjectiontool

Jarvis_CyberSecurity_AI #pentest
Local cybersecurity AI assistant for ethical hacking, CTF solving, and learning. Powered by Ollama + Gradio with tool execution.

https://github.com/abby-exe/JarvisCyberSecurityAI

EngineX #bugbounty #recon #scanner
EngineX is an all-in-one recon and vulnerability scanning framework built for bug bounty hunters. It automates subdomain discovery, crawling, parameter extraction, and integrates tools like Nuclei,...

https://github.com/gourav001-s/EngineX

cti-expert #osint
CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code. 67+ commands, 35 techniques, no API keys required.

https://github.com/7onez/cti-expert

mempalace #exploit
AgentSkill - lightweight package manager and skill integration environment for AI agents. The application automates the discovery, security auditing, comparison, and batch deployment of open-source...

https://github.com/agentskills-manager/mempalace

agents-evolution #pentest
Optimized AGENTS.md system instructions for AI CLI/IDE agents. Token-efficient (Caveman ~75%), skills, subagent orchestration, security checks. Drop-in config for Qwen, Claude, Codex, Cursor и других.

https://github.com/kissrosecicd-hub/agents-evolution

lockdown #exploit #web
JSC security hardening for WebContent process. Configures JavaScriptCore options to eliminate exploit primitives (addrof/fakeobj, JIT type confusion, GC UAF).

https://github.com/roothide/lockdown