pentest-kit #pentest
Pentest with Claude - Learn with Claude

https://github.com/enderphan94/pentest-kit

Web_Vuln_scanner #scanner #web
Developed a lightweight web security scanner capable of identifying common vulnerabilities such as XSS and SQL Injection. Implemented automated URL analysis, input validation testing, and generated...

https://github.com/Ricci-ricci/WebVulnscanner

prism-scanner #scanner
Scan AI agents, plugins, and MCP servers for malicious code before install and leftover threats after uninstall

https://github.com/Shelflifegymnopilusvalidipes977/prism-scanner

mac-cyber-bootstrap #bugbounty
Full macOS bootstrap for cybersecurity, CTF & bug bounty

https://github.com/srhoe/mac-cyber-bootstrap

cleantools-for-mac #pentest
Try the easiest tool to keep your Mac flawless. Free up a ton of space, block malware, and say goodbye to lag. Keep your Mac ready for anything with CleanToolsMAC.

https://github.com/Tim-eleazu/cleantools-for-mac

llm-prompt-injection-security-handbook #pentest
A comprehensive technical research report on LLM Prompt Injection threats, covering direct/indirect injection, jailbreaking, adversarial suffixes, and defense-in-depth architectures.

https://github.com/SecureNexusLab/llm-prompt-injection-security-handbook

Notes-Templates #cloud #web
Pentest and manual code review templates -- web/API, cloud (AWS/GCP/Azure), mobile (iOS/Android), thick client, hardware/IoT, plus 11 language-specific code review guides

https://github.com/gromhacks/Notes-Templates

ansible-linux-hardening #pentest
Hardening Linux automatisé avec Ansible — conformité ANSSI BP-028 (niveaux M/I/R/E). Durcissement système, réseau, SSH, utilisateurs + audit avec rapport Markdown.

https://github.com/Makaveli81/ansible-linux-hardening

CTI-RAG #osint
CTI-RAG is a Retrieval-Augmented Generation (RAG) framework for Cyber Threat Intelligence (CTI), integrating knowledge graph and causal reasoning capabilities to provide security analysts with an i...

https://github.com/Ais1on/CTI-RAG

pentest-assists-ai #web
Demo tools for webinar merdekasiber.com

https://github.com/zakirkun/pentest-assists-ai

Mirage #pentest
RecRoom Internal Multi Hack & Bypass Documentation for learning purposes

https://github.com/krakshot/Mirage

audion #pentest
Hack music. General purpose language for interactive music, audiovisual art, performance and installation

https://github.com/audion-lang/audion

claude-armory #pentest
A curated collection of Claude Code agents and skills for coding, security, and DevOps

https://github.com/pulkit0x/claude-armory

sigma-audit #exploit #osint #scanner
Full-spectrum security audit: Vajra + Semgrep + Zentinel + VulnGraph MCP. Live report with CVE intelligence, exploit PoCs, ATT&CK kill chains.

https://github.com/copyleftdev/sigma-audit

Web3-Exploit-Analysis #exploit #web
Analysis of Web3 security incidents and Proof of Concept (PoC) implementations.

https://github.com/chettz/Web3-Exploit-Analysis

livewire-honeypot #exploit #scanner #web
High-interaction honeypot mimicking a vulnerable Laravel/Livewire app. Captures RCE exploits and webshells targeting CVE-2024-47823, CVE-2025-54068, and CVE-2025-14894, then analyzes them in sandbo...

https://github.com/HelgeSverre/livewire-honeypot

CVE-2025-8110 #exploit
RCE exploit for Gogs <= 0.13.3

https://github.com/0dgt/CVE-2025-8110

CVE-2025-58434-59528-htb-ctf #exploit
Exploitation Silentium HTB-CTF

https://github.com/jwsly12/CVE-2025-58434-59528-htb-ctf

R2SAE #exploit
Firefox extension for detecting and exploiting CVE-2025-55182 — Prototype Pollution RCE in Next.js React Server Actions

https://github.com/oscar-mine/R2SAE

CVE-2025-8110-Gogs-RCE-Exploit #exploit
Gogs CVE-2025-8110 RCE Exploit

https://github.com/TYehan/CVE-2025-8110-Gogs-RCE-Exploit

cewlai #password #recon
AI-Powered Wordlist Generator & Target Recon Tool - Replaces CeWL + CUPP + trufflehog in a single Go binary

https://github.com/Chocapikk/cewlai