Flowise-RCE-CVE-2025-59528 #exploit #scanner
Authenticated Remote Code Execution (RCE) exploit for Flowise AI versions ≤ 3.0.4. Leverages a vulnerability in the /api/v1/node-load-method/customMCP endpoint to execute arbitrary system commands ...

https://github.com/r3nsi15/Flowise-RCE-CVE-2025-59528

toolkit #scanner
Practical tools for AI security testing and pentesting, focused on evaluating model robustness, prompt injection risks, jailbreak resistance, data leakage, agent security, and LLM application vulne...

https://github.com/ferranverdes/toolkit

bug-bounty #exploit #osint #recon #scanner
Documenting my security research journey: This repository contains detailed vulnerability write-ups, proof-of-concept (PoC) exploits, and the custom automation tools I use for reconnaissance and sy...

https://github.com/aw-junaid/bug-bounty

swagger-exposure-check #osint #password
A zero-dependency Python tool for discovering exposed Swagger/OpenAPI documentation via brute-forcing and OSINT.

https://github.com/princejnr/swagger-exposure-check

webshield #exploit #scanner #web
🛡️ Website Security Auditor — Security score, letter grade, and code-level fix guidance for every finding. 17 scan modules: SSL, headers, CORS, CSP, JWT, GraphQL, supply chain CVEs & more.

https://github.com/AKIB473/webshield

a.e.g.i.s #pentest
AEGIS — Automated Enterprise-Grade Inspection Suite. The paranoid audit tool your vibe-coded app deserves.

https://github.com/RideMatch1/a.e.g.i.s

BuilderPulse #exploit #osint
AI-powered daily intelligence for indie hackers and builders. 20 questions, 10+ sources, every morning.

https://github.com/BuilderPulse/BuilderPulse

benchjack #scanner
AI agent benchmark hackability scanner — find evaluation vulnerabilities before they undermine your results

https://github.com/benchjack/benchjack

akira #pentest
The AI pentest co-pilot that actually finds bugs. Phase-chained, evidence-gated offensive security skills for Claude Code, Gemini CLI, Cursor, and more.

https://github.com/Kalp1774/akira

MLFinancialSecurity #pentest
For this project, SmartBugs-Curated is used, which is public on GitHub. It was created as a curated dataset of Solidity smart contracts annotated with tagged vulnerabilities, and SmartBugs’ own dat...

https://github.com/mesut-ozdag/MLFinancialSecurity

CVE-2025-49113-Roundcube-RCE #exploit
CVE-2025-49113 – Roundcube ≤1.6.10 post-auth RCE via PHP object deserialization (HackTheBox CTF)

https://github.com/rippsec/CVE-2025-49113-Roundcube-RCE

CVE-2025-27591-Meta-below-LPE #exploit
CVE-2025-27591 – Meta below symlink following local privilege escalation (HackTheBox CTF)

https://github.com/rippsec/CVE-2025-27591-Meta-below-LPE

CVE-2025-24893-XWiki-SSTI-RCE #exploit
CVE-2025-24893 – XWiki SSTI unauthenticated RCE exploit (HackTheBox CTF)

https://github.com/rippsec/CVE-2025-24893-XWiki-SSTI-RCE

LurkerX #pentest
Decompile, optimize, recompile, and integrate spyware and remote control features into APK and EXE files with LurkerX, the ultimate tool for security researchers, penetration testers, and ethical h...

https://github.com/the-hollowclan/LurkerX

SINT-Footprint-Gathering-Tool #osint
OSINT Footprint Gathering Tool Comprehensive intelligence gathering platform for domains, URLs, emails, IPs, mobile numbers, persons, organizations, and threat intelligence. Analyze, visualize rela...

https://github.com/Surendhar070/SINT-Footprint-Gathering-Tool

OSINT-Master-Tool #exploit #osint
OSINT Master Tool is a unified intelligence gathering suite that provides a professional GUI for powerful open-source intelligence tools. It consolidates 15+ external tools and 8 built-in utilities...

https://github.com/aingram702/OSINT-Master-Tool

Pentest-Swarm-AI #bugbounty #exploit #recon
Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitor...

https://github.com/Armur-Ai/Pentest-Swarm-AI

CYBERTON00 #pentest
Cybersecurity Learner | Ethical Hacking | Building Tools ⚡

https://github.com/CYBERTON00/CYBERTON00

Hunt-kit #bugbounty
A personal bug bounty operating system for methodology, tooling, automation, and continuous learning.

https://github.com/AliMousaviSoft/Hunt-kit

recon #bugbounty #recon
Modular recon tool for bug bounty

https://github.com/dan1elnj/recon

birdy-edwards #osint
Automated AI powered Facebook intelligence tool for target profiling, network analysis and threat reporting. Runs entirely on-device via Ollama.

https://github.com/jeet-ganguly/birdy-edwards