Mirage #pentest
RecRoom Internal Multi Hack & Bypass Documentation for learning purposes

https://github.com/krakshot/Mirage

audion #pentest
Hack music. General purpose language for interactive music, audiovisual art, performance and installation

https://github.com/audion-lang/audion

claude-armory #pentest
A curated collection of Claude Code agents and skills for coding, security, and DevOps

https://github.com/pulkit0x/claude-armory

sigma-audit #exploit #osint #scanner
Full-spectrum security audit: Vajra + Semgrep + Zentinel + VulnGraph MCP. Live report with CVE intelligence, exploit PoCs, ATT&CK kill chains.

https://github.com/copyleftdev/sigma-audit

Web3-Exploit-Analysis #exploit #web
Analysis of Web3 security incidents and Proof of Concept (PoC) implementations.

https://github.com/chettz/Web3-Exploit-Analysis

livewire-honeypot #exploit #scanner #web
High-interaction honeypot mimicking a vulnerable Laravel/Livewire app. Captures RCE exploits and webshells targeting CVE-2024-47823, CVE-2025-54068, and CVE-2025-14894, then analyzes them in sandbo...

https://github.com/HelgeSverre/livewire-honeypot

CVE-2025-8110 #exploit
RCE exploit for Gogs <= 0.13.3

https://github.com/0dgt/CVE-2025-8110

CVE-2025-58434-59528-htb-ctf #exploit
Exploitation Silentium HTB-CTF

https://github.com/jwsly12/CVE-2025-58434-59528-htb-ctf

R2SAE #exploit
Firefox extension for detecting and exploiting CVE-2025-55182 — Prototype Pollution RCE in Next.js React Server Actions

https://github.com/oscar-mine/R2SAE

CVE-2025-8110-Gogs-RCE-Exploit #exploit
Gogs CVE-2025-8110 RCE Exploit

https://github.com/TYehan/CVE-2025-8110-Gogs-RCE-Exploit

cewlai #password #recon
AI-Powered Wordlist Generator & Target Recon Tool - Replaces CeWL + CUPP + trufflehog in a single Go binary

https://github.com/Chocapikk/cewlai

subdomain-monitor #bugbounty #recon
Automated subdomain monitoring tool designed for bug bounty hunters and penetration testers. Continuously discovers new subdomains and alerts you instantly via Telegram.

https://github.com/killua889/subdomain-monitor

XSS-HUNTER #bugbounty #exploit #recon #scanner #web
Scan reflected XSS with an automated bug bounty workflow that chains tools from subdomain discovery to confirmed PoC findings

https://github.com/brittle-finance685/XSS-HUNTER

Hackendo #osint
OSINT TOOLS ALL IN ONE PWA

https://github.com/HackendoSNT/Hackendo

vibescan #exploit #scanner #web
Open-source web security scanner — 12 checks, vibe score, fix guides. Built with Django & HTMX.

https://github.com/kalus-msic/vibescan

CredSweeper #password #scanner
CredSweeper is a tool to detect credentials in any directories or files. CredSweeper could help users to detect unwanted exposure of credentials (such as token, passwords, api keys etc.) in advance...

https://github.com/Samsung/CredSweeper

cve-mcp-server #exploit #osint
Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.

https://github.com/mukul975/cve-mcp-server

tech-digest #pentest
Claude Code skill: daily tech digest from Hacker News, Lobste.rs and more. Zero dependencies, score-based filtering.

https://github.com/camilleroux/tech-digest

prmana #pentest
OIDC SSH login for Linux with DPoP — replace static SSH keys with IdP-issued tokens, no gateway

https://github.com/prodnull/prmana

SMART-HANDBAG-SAFETY-SYSTEM #pentest
Smart Handbag Safety System is an IoT-based security solution that monitors unauthorized access and protects personal belongings using sensors and real-time alerts. The system detects suspicious ac...

https://github.com/janani-p2005/SMART-HANDBAG-SAFETY-SYSTEM

fake-usdt-sender #pentest
USDT Flasher - ultimate multi-network transaction automation. Instant processing for ERC-20, TRC-20, BEP-20 USDT with enterprise-grade security and precision execution.

https://github.com/Mangroberger/fake-usdt-sender