api-security-scanner #scanner
api-security-scanner security / pentest utility.

https://github.com/mudbbir23/api-security-scanner

skill-detector-plugins #scanner
Claude Code plugin security scanner with YARA rules and multi-dimensional semantic analysis

https://github.com/yonglunyao/skill-detector-plugins

reentrancy-poc #exploit #scanner
Smart contract security: reentrancy vulnerability PoC, exploit, and two independent mitigations (CEI + OpenZeppelin ReentrancyGuardTransient) — tested in Foundry.

https://github.com/mertcobn/reentrancy-poc

Hash-Hunter-Advanced-Multi-Hash-Password-Cracking-Tool #password
A Python-based GUI tool for cracking and analyzing hashed passwords using multiple algorithms like MD5, SHA-256, PBKDF2, bcrypt, and Argon2. Features real-time monitoring, live statistics, and expo...

https://github.com/akshy24kumar-sketch/Hash-Hunter-Advanced-Multi-Hash-Password-Cracking-Tool

network-hardening-scanner #scanner
A Python CLI tool that runs network scans (Nmap/Scapy), compares results against a hardening baseline (CIS Benchmarks), flags open ports and weak configs, and outputs a scored HTML report. Containe...

https://github.com/PrivSecOpsLabs/network-hardening-scanner

AutoPWN-Suite #exploit #scanner
AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.

https://github.com/GamehunterKaan/AutoPWN-Suite

GoSQLX #scanner
High-performance SQL parser, formatter, linter & security scanner for Go - 1.5M+ ops/sec, multi-dialect, zero-copy, race-free

https://github.com/ajitpratap0/GoSQLX

defi-security-suite #exploit #scanner
Auditor-grade Foundry test suite: exploit PoCs, invariant tests, fuzz campaigns for common DeFi vulnerability patterns

https://github.com/ameerozigi/defi-security-suite

Flowise-CVE-2025-58434-PasswordReset #exploit #password
Unauthenticated password reset exploit for Flowise AI ≤ 3.0.5. Abuses the /api/v1/account/forgot-password endpoint to change any user's password without prior authentication. Includes a proof-of-co...

https://github.com/r3nsi15/Flowise-CVE-2025-58434-PasswordReset

Cyber-Arsenal #pentest
cyber security tools for ethical, hacking purposes only

https://github.com/Akahwaj/Cyber-Arsenal

AutoAR #bugbounty #osint #recon #scanner
AutoAR is an automated security reconnaissance tool, ASM and Discord bot for bug bounty hunters and penetration testers. It automates gathering subdomains, scanning ports, detecting technologies, m...

https://github.com/h0tak88r/AutoAR

BUG_BOUNTY_TOOLS #bugbounty #scanner
This repo contains my Bug bounty tool use for finding vuln on ethical target domain. This tools Fucos on Top 10 OWASP

https://github.com/Diser-Xian/BUGBOUNTYTOOLS

corprecon #osint #recon
OSINT tool to map French corporate mandate networks (INSEE SIRENE, BODACC, Pappers)

https://github.com/twux-sec/corprecon

home-security-scanner #scanner
home-security-scanner security / pentest utility.

https://github.com/DEEPALI-2005/home-security-scanner

CodeGuardian #scanner
CodeGuardian AI is a code security scanner that finds vulnerabilities in your code like API keys, login etc.. With this you can fix your project and take it to the safest level possible.

https://github.com/Anirudh-Deepak/CodeGuardian

open-quantum-secure #scanner
Post-quantum cryptography scanner: detects quantum-vulnerable algorithms across 14+ languages with CycloneDX 1.7 CBOM output and CNSA 2.0 compliance checking

https://github.com/jimbo111/open-quantum-secure

aphido #scanner
Be the bug to find the bug. Security scanner for Lovable/Bolt apps — exposed credentials, missing RLS, accessibility, performance.

https://github.com/mralbertzwolle/aphido

CacheF3r #ad #scanner #web
CacheF3r is a powerful, high-performance scanner designed to detect web cache poisoning vulnerabilities across web applications. By leveraging a comprehensive set of testing techniques, CacheF3r ca...

https://github.com/joelindra/CacheF3r

magento2-module-polyshell-protection #ad #exploit #scanner #web
Comprehensive defense-in-depth Magento 2 module that closes the PolyShell unrestricted file upload vulnerability (APSB25-94) — blocking polyglot webshell uploads across eight interception layers in...

https://github.com/aregowe/magento2-module-polyshell-protection

quey-igaming-exploit #exploit
Security PoC demonstrating a State Recovery Attack against PRNGs (MT19937) in iGaming, and the deployment of Quey Quantum TRNG to prevent predictive exploits.

https://github.com/QueyQuantum/quey-igaming-exploit

CVE-2026-40487 #ad #exploit #web
CVE-2026-40487 | Postiz <= 2.21.5 | Arbitrary File Upload via MIME-Type Spoofing → Stored XSS → Account Takeover | CVSS 8.9 High

https://github.com/Astaruf/CVE-2026-40487