secaudit #web
Safe external web security auditor — CLI tool

https://github.com/SllHex/secaudit

Web_Pentesting_Lab #web
Kali Linux - Attacker <------> Metasploitable 2 - Target

https://github.com/Vedanth-D/WebPentestingLab

Deep-WordPress-plugin-security-pentest---Recon-Taint-Analysis-Exploit-PoC-And-Report-by-Claude #exploit #recon
Deep WordPress plugin security pentest using claude

https://github.com/endangcamon/Deep-WordPress-plugin-security-pentest---Recon-Taint-Analysis-Exploit-PoC-And-Report-by-Claude

pentest-agent #ad #scanner
Pentest Agent are autonomous AI agents that act just like real hackers - they run your code dynamically, find vulnerabilities, and validate them through actual proof-of-concepts. Built for develope...

https://github.com/lebaocongct/pentest-agent

Agentic-Pentesting-Framework #exploit
APF: A multi-agent LLM framework for autonomous penetration testing with risk-score-weighted resource allocation and MCP-based security tooling.

https://github.com/Manuelvillarvieites/Agentic-Pentesting-Framework

ethical-hacking-tools #pentest
a collection of python security and ethical hacking tools

https://github.com/sharmamaheshwar760-maker/ethical-hacking-tools

Android-remote-control-2026 #pentest
a powerful and flexible Remote Administration Tool (RAT) for Android devices, designed exclusively for ethical hackers, penetration testers, and red team professionals. It offers advanced remot...

https://github.com/remote-android-developper/Android-remote-control-2026

ghosos-cli #osint
👻 A stealthy OSINT tool for fast username investigation across 18+ social media platforms with automatic Ghost-Mode identity rotation.

https://github.com/ideapedyudi/ghosos-cli

CoSINT #osint #scanner
Investigate entities with AI-assisted OSINT scans, profile checks, and cross-correlation across email, domain, IP, username, phone, person, media, and wallet.

https://github.com/Prestonbalconied467/CoSINT

curated-mcp-servers #exploit
Discover curated MCP servers for connecting AI assistants to tools, data sources, and APIs through community PRs

https://github.com/Huyhoan2559/curated-mcp-servers

Vibecode-Cleaner-Fartrun #ad #scanner
Not another AI reviewing AI. Rust-powered code scanner that actually reads your codebase — zero extra tokens consumed. 29 MCP tools: security vulns, dead code, health checks, save points, froze...

https://github.com/ChuprinaDaria/Vibecode-Cleaner-Fartrun

security-scanner #exploit #scanner
Scan project dependencies and Dockerfiles for known vulnerabilities across 8 ecosystems with free public sources and AI analysis

https://github.com/Blacke2902/security-scanner

ninjaXRF #recon #scanner
Scan DNS zones for AXFR misconfigurations with fast NS discovery, concurrent checks, and full zone dump support for security testing

https://github.com/thrifty-consonance737/ninjaXRF

sast-skills #cloud #scanner
Scan codebases for security flaws with LLM agent skills that turn Claude Code, Cursor, and other assistants into SAST scanners

https://github.com/reasonless-throne486/sast-skills

quodeq #exploit #scanner
AI-powered code quality and security scanner. Open source, MIT, runs locally. <🧭>

https://github.com/quodeq/quodeq

Claude-Sec #scanner
Local scanner that lists Claude connectors and plugins installed on your machine, for lookup on claudesec.pluto.security

https://github.com/plutosecurity/Claude-Sec

BugBountySkills #bugbounty
An obsessive, expert-tier knowledge base + AI skill system for professional bug bounty hunting, security research, and penetration testing.

https://github.com/0xN0RMXL/BugBountySkills

security-toolkit #password #scanner
Python security toolkit — hash cracking, port scanning, password analysis & file integrity monitoring. Educational tools for cybersecurity learning.

https://github.com/NovaCode37/security-toolkit

Python-CLI-Scripts #osint
This repository contains my Python scripts for Automation, OSINT Tools, and other functions.

https://github.com/ksb-intel/Python-CLI-Scripts

recon-x #exploit #password #recon #scanner #web
Web recon tool — subdomain enum, port scan, CVE matching, WAF detection, dir brute-force, JS secrets. Single binary, HTML report.

https://github.com/bytezora/recon-x

HeuristiX #ad #scanner #web
HeuristiX is a smart security scanner that checks websites for bad things. It crawls a site and finds malware, phishing pages, dangerous links, and other threats. Think of it like a security guard ...

https://github.com/thebestg5/HeuristiX