security-scanner #scanner #web
Static security scanner purpose-built for AI-generated web app code

https://github.com/nometria/security-scanner

DevSecOps-pipeline #cloud #scanner #web
DevSecOps pipeline is a security scanner for scanning the vulnerabilities in cloud IaC and Web app codes that are pushed to Githubs.

https://github.com/Sahilmir18/DevSecOps-pipeline

network-vulnerability-scanner #exploit #scanner #web
Automated network security assessment tool — performs port scanning, SSL/TLS analysis, web app header checks, and CVE detection via Nuclei. Generates professional PDF reports. Built with Python, Nm...

https://github.com/Kushh111/network-vulnerability-scanner

galiyuk #bugbounty
tools bug bounty by holl.ez

https://github.com/tokupens/galiyuk

Vulnchain #scanner
AI-powered multi-language security scanner: 154 Semgrep rules, 13 Joern CPG scripts, AI code detection, and attack-chain correlation

https://github.com/hamzamiladin/Vulnchain

gws-auditor #exploit
Open-source Google Workspace security posture assessment tool. Audit your GWS tenant against CIS Benchmarks, CISA SCuBA Baselines, and industry best practices.

https://github.com/argusssec-cloud/gws-auditor

SQL_Injection_tool #exploit
Advanced SQL Injection Testing Tool in Python: blind/time/error-based, UNION helper, forms auto-detect, Playwright support.

https://github.com/sudoxs/SQLInjectiontool

Jarvis_CyberSecurity_AI #pentest
Local cybersecurity AI assistant for ethical hacking, CTF solving, and learning. Powered by Ollama + Gradio with tool execution.

https://github.com/abby-exe/JarvisCyberSecurityAI

EngineX #bugbounty #recon #scanner
EngineX is an all-in-one recon and vulnerability scanning framework built for bug bounty hunters. It automates subdomain discovery, crawling, parameter extraction, and integrates tools like Nuclei,...

https://github.com/gourav001-s/EngineX

cti-expert #osint
CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code. 67+ commands, 35 techniques, no API keys required.

https://github.com/7onez/cti-expert

mempalace #exploit
AgentSkill - lightweight package manager and skill integration environment for AI agents. The application automates the discovery, security auditing, comparison, and batch deployment of open-source...

https://github.com/agentskills-manager/mempalace

agents-evolution #pentest
Optimized AGENTS.md system instructions for AI CLI/IDE agents. Token-efficient (Caveman ~75%), skills, subagent orchestration, security checks. Drop-in config for Qwen, Claude, Codex, Cursor и других.

https://github.com/kissrosecicd-hub/agents-evolution

lockdown #exploit #web
JSC security hardening for WebContent process. Configures JavaScriptCore options to eliminate exploit primitives (addrof/fakeobj, JIT type confusion, GC UAF).

https://github.com/roothide/lockdown

sec-skills #pentest
Security research skills repository

https://github.com/Rvn0xsy/sec-skills

OpenEndpointSecurity #pentest
An implementation of EndpointSecurity on the 5BSD kernel.

https://github.com/5BSD/OpenEndpointSecurity

FyxxVault #exploit #password
🔒 Free, open-source password manager with zero-knowledge encryption. AES-256-GCM | PBKDF2 210K | Chrome Extension | iOS App | Unlimited | No tracking

https://github.com/Fyxx20/FyxxVault

SenWeaverCoding #pentest
A Rust-first autonomous AI agent runtime and CLI code editor. Built on SenAgentOS, it applies Harness Engineering to code engineering: orchestrate LLM agents for autonomous exploration, refactoring...

https://github.com/senweaver/SenWeaverCoding

hack-skills #pentest
Helping AI Agent become a awesome practical hacker!

https://github.com/yaklang/hack-skills

llm-con #osint #recon
LLM security assessment framework. Automated reconnaissance, fingerprinting, and attack simulation for AI/LLM endpoints. Discovers chat endpoints, identifies model families, extracts system prompts...

https://github.com/lulbitz/llm-con

-CTT-PAN-OS-EXPLOIT-CVE-2024-340 #ad #exploit
CTT-PAN-OS-Exploit – CVE-2024-3400 (CVSS 10.0) with Convergent Time Theory enhancement. Uses α = 0.0302011 temporal dispersion, 33-layer phase resonance cascade, and 11 ns temporal wedge filtering ...

https://github.com/SimoesCTT/-CTT-PAN-OS-EXPLOIT-CVE-2024-340

CVE-2025-55182 #exploit
Interactive RCE exploitation tool for CVE-2025-55182 (React Server Components)

https://github.com/hexsh1dow/CVE-2025-55182