missingpersons-sd-gov-documentation #osint
A Node.js + Puppeteer OSINT tool that extracts publicly available data from the South Dakota Missing Persons database missingpersons.sd.gov and converts it into a clean, automatically updated CSV d...

https://github.com/CoreData-Labs/missingpersons-sd-gov-documentation

WhiteSINT #osint
An OSINT Multi-Tool, written in python for White Hat usage

https://github.com/no0xpy/WhiteSINT

ethereum-contract-audit-checklist #scanner
Security audit checklist and automated scanner for common Solidity vulnerabilities before mainnet deploy

https://github.com/yellowpeacockavzoohlk/ethereum-contract-audit-checklist

CyberOS-Cardputer #scanner #wireless
Cyberpunk OS for M5Stack Cardputer ⚡ WiFi scanner • Radar • Security detect • Hacker UI

https://github.com/nguyenphuhoang243-web/CyberOS-Cardputer

cookie-audit #scanner
Most cookie consent setups are broken in ways nobody notices until an audit. This Puppeteer-powered CLI fires up a headless browser to capture, classify, and grade every cookie your site sets. Scan...

https://github.com/diShine-digital-agency/cookie-audit

grasp #scanner #web
98-tool MCP server + interactive architecture maps for any repo or local codebase. Dependency graphs, security scanner, DORA metrics, Grasp Brain (SQLite+Kuzu), AI chat — 34 languages, 15 AI provid...

https://github.com/ashfordeOU/grasp

superlevels #ad #exploit
A super Chrome extension I made that's safer than installing external malware/spyware-filled extensions that form a massive security risk, this one is open source and you can read and check the sou...

https://github.com/levelsio/superlevels

hackingtool-plugin #osint
Claude Code plugin: 183+ pentesting & OSINT tools from Z4nzu/hackingtool. Auto-runs what it can, hands off the rest.

https://github.com/AKCodez/hackingtool-plugin

vlnr #exploit #scanner
AI security agent for the Python supply chain: scans packages, generates exploits, and validates them in Docker, autonomously.

https://github.com/nandrzej/vlnr

WeSCE-Benchmark #pentest
WeSCE: Multi-Scale Energy Benchmark for Security Drift in Weakly-Specified LLM Code Editing

https://github.com/WoooooZzy/WeSCE-Benchmark

cis-backend #pentest
this project is a backend service designed to support a CIS (Center for Internet Security) advisory or compliance system. It provides APIs and logic for evaluating, managing, and reporting security...

https://github.com/devpulse-star/cis-backend

Auctify #web
Professional auction house plugin for Minecraft Paper/Spigot servers with real-time bidding, H2/MySQL/SQLite storage, multi-language support, and bank-grade security.

https://github.com/PteroxOS/Auctify

netwatch #osint
NETWATCH is a terminal-based security monitoring tool that gives you continuous, live visibility into every active network connection on your machine, with automatic risk scoring, GeoIP intelligenc...

https://github.com/kyegomez/netwatch

not-a-security-issue #exploit
A deterministic Use-After-Free (UAF) in com.apple.iokit.IOSurface affecting macOS 15.x through 26.x. Reported to Apple, but they were 'unable to identify a security issue.' So, here is the PoC for ...

https://github.com/MEKOD/not-a-security-issue

kernelbreach-app #pentest
a hacker themed, pokemon inspired, dungeon crawling ASCII RPG

https://github.com/knightsky-cpu/kernelbreach-app

leona-open #exploit
Leona open-source shell: Android runtime security alpha + server-side BoxId pipeline

https://github.com/zedbully/leona-open

SecScan #exploit #scanner
Local-LLM-powered security scanner. Multi-lens per-file review + architecture extraction + threat-model synthesis + sandboxed exploit PoCs. 100% local inference via LM Studio.

https://github.com/jhammant/SecScan

UAC-Bypass-ComputerDefaults #exploit
POC of a UAC bypass using ComputerDefaults.exe. Exploits registry hijacking via the ms-settings shell command to achieve High Integrity execution without a prompt. For security research only.

https://github.com/mshute-dev/UAC-Bypass-ComputerDefaults

Exploit_CVE-2025-47812 #exploit
UnauthenticatedRCE.CVE-2025-47812

https://github.com/H3XploR/ExploitCVE-2025-47812

zero-click-exploit-analysis #exploit
CVE-2025-55177 + CVE-2025-43300: reverse-engineering the WhatsApp-ImageIO zero-click iOS chain, with interactive labs.

https://github.com/danielw98/zero-click-exploit-analysis

CVE-2025-5880-PoC #exploit #scanner
Proof-of-concept exploit for an unauthenticated path traversal vulnerability in Whistle v2.9.98.

https://github.com/yacine-rm/CVE-2025-5880-PoC