CodeGuardian #scanner
CodeGuardian AI is a code security scanner that finds vulnerabilities in your code like API keys, login etc.. With this you can fix your project and take it to the safest level possible.

https://github.com/Anirudh-Deepak/CodeGuardian

open-quantum-secure #scanner
Post-quantum cryptography scanner: detects quantum-vulnerable algorithms across 14+ languages with CycloneDX 1.7 CBOM output and CNSA 2.0 compliance checking

https://github.com/jimbo111/open-quantum-secure

aphido #scanner
Be the bug to find the bug. Security scanner for Lovable/Bolt apps — exposed credentials, missing RLS, accessibility, performance.

https://github.com/mralbertzwolle/aphido

CacheF3r #ad #scanner #web
CacheF3r is a powerful, high-performance scanner designed to detect web cache poisoning vulnerabilities across web applications. By leveraging a comprehensive set of testing techniques, CacheF3r ca...

https://github.com/joelindra/CacheF3r

magento2-module-polyshell-protection #ad #exploit #scanner #web
Comprehensive defense-in-depth Magento 2 module that closes the PolyShell unrestricted file upload vulnerability (APSB25-94) — blocking polyglot webshell uploads across eight interception layers in...

https://github.com/aregowe/magento2-module-polyshell-protection

quey-igaming-exploit #exploit
Security PoC demonstrating a State Recovery Attack against PRNGs (MT19937) in iGaming, and the deployment of Quey Quantum TRNG to prevent predictive exploits.

https://github.com/QueyQuantum/quey-igaming-exploit

CVE-2026-40487 #ad #exploit #web
CVE-2026-40487 | Postiz <= 2.21.5 | Arbitrary File Upload via MIME-Type Spoofing → Stored XSS → Account Takeover | CVSS 8.9 High

https://github.com/Astaruf/CVE-2026-40487

Flowise-RCE-CVE-2025-59528 #exploit #scanner
Authenticated Remote Code Execution (RCE) exploit for Flowise AI versions ≤ 3.0.4. Leverages a vulnerability in the /api/v1/node-load-method/customMCP endpoint to execute arbitrary system commands ...

https://github.com/r3nsi15/Flowise-RCE-CVE-2025-59528

toolkit #scanner
Practical tools for AI security testing and pentesting, focused on evaluating model robustness, prompt injection risks, jailbreak resistance, data leakage, agent security, and LLM application vulne...

https://github.com/ferranverdes/toolkit

bug-bounty #exploit #osint #recon #scanner
Documenting my security research journey: This repository contains detailed vulnerability write-ups, proof-of-concept (PoC) exploits, and the custom automation tools I use for reconnaissance and sy...

https://github.com/aw-junaid/bug-bounty

swagger-exposure-check #osint #password
A zero-dependency Python tool for discovering exposed Swagger/OpenAPI documentation via brute-forcing and OSINT.

https://github.com/princejnr/swagger-exposure-check

webshield #exploit #scanner #web
🛡️ Website Security Auditor — Security score, letter grade, and code-level fix guidance for every finding. 17 scan modules: SSL, headers, CORS, CSP, JWT, GraphQL, supply chain CVEs & more.

https://github.com/AKIB473/webshield

a.e.g.i.s #pentest
AEGIS — Automated Enterprise-Grade Inspection Suite. The paranoid audit tool your vibe-coded app deserves.

https://github.com/RideMatch1/a.e.g.i.s

BuilderPulse #exploit #osint
AI-powered daily intelligence for indie hackers and builders. 20 questions, 10+ sources, every morning.

https://github.com/BuilderPulse/BuilderPulse

benchjack #scanner
AI agent benchmark hackability scanner — find evaluation vulnerabilities before they undermine your results

https://github.com/benchjack/benchjack

akira #pentest
The AI pentest co-pilot that actually finds bugs. Phase-chained, evidence-gated offensive security skills for Claude Code, Gemini CLI, Cursor, and more.

https://github.com/Kalp1774/akira

MLFinancialSecurity #pentest
For this project, SmartBugs-Curated is used, which is public on GitHub. It was created as a curated dataset of Solidity smart contracts annotated with tagged vulnerabilities, and SmartBugs’ own dat...

https://github.com/mesut-ozdag/MLFinancialSecurity

CVE-2025-49113-Roundcube-RCE #exploit
CVE-2025-49113 – Roundcube ≤1.6.10 post-auth RCE via PHP object deserialization (HackTheBox CTF)

https://github.com/rippsec/CVE-2025-49113-Roundcube-RCE

CVE-2025-27591-Meta-below-LPE #exploit
CVE-2025-27591 – Meta below symlink following local privilege escalation (HackTheBox CTF)

https://github.com/rippsec/CVE-2025-27591-Meta-below-LPE

CVE-2025-24893-XWiki-SSTI-RCE #exploit
CVE-2025-24893 – XWiki SSTI unauthenticated RCE exploit (HackTheBox CTF)

https://github.com/rippsec/CVE-2025-24893-XWiki-SSTI-RCE

LurkerX #pentest
Decompile, optimize, recompile, and integrate spyware and remote control features into APK and EXE files with LurkerX, the ultimate tool for security researchers, penetration testers, and ethical h...

https://github.com/the-hollowclan/LurkerX