PHP_8.1.x_Exploit #exploit #scanner
Automated detection & exploitation of critical PHP vulnerabilities (CVE-2024-4577 bypass, CVE-2025-14177, CVE-2025-14180, CVE-2025-14178)

https://github.com/gl1tch0x1/PHP8.1.xExploit

CVE-2025-24367-Cacti-Exploit #ad #exploit #scanner #web
Script hecho para obtener una webshell gracias a la vulnerabilidad de cacti CVE-2025-24367 en su versión 1.2.28.

https://github.com/dantedansh/CVE-2025-24367-Cacti-Exploit

CVE-2025-69985-FUXA-Exploit #exploit #scanner #web
CVE-2025-69985 is a critical authentication bypass vulnerability in FUXA (open-source web-based SCADA/HMI software) affecting versions ≤ 1.2.8.

https://github.com/ladybugsaga/CVE-2025-69985-FUXA-Exploit

shield-cli #pentest
Automate AI-powered pentesting with Shield CLI for multi-agent workflows, 19 tools, and support for Gemini, GPT-4, Claude, and OpenRouter

https://github.com/Ordermyaceaeaorta658/shield-cli

pentest-ai #exploit
Automate pentests with AI-powered agents that run real tools, find PoCs, and generate clear reports

https://github.com/forcepumpholibut956/pentest-ai

pentester-mcp #exploit
Run 200+ open-source pentesting tools through MCP for AI assistants and automate security testing workflows

https://github.com/attic7604/pentester-mcp

cybersec-toolkit #pentest
580+ cybersecurity tools, one command. Modular bash installer for Linux & Termux with 14 profiles, 18 modules, and an MCP server for AI-assisted ethical hacking.

https://github.com/26zl/cybersec-toolkit

pentester-notes #pentest
Personal penetration testing notes, methodology, tool usage, commands, and checklists for ethical hacking practice.

https://github.com/AkramAldahyani/pentester-notes

Portfolio #scanner
Showcase cybersecurity and ethical hacking skills with a portfolio of penetration testing, vulnerability discovery, and security tools

https://github.com/Starchy-dirimentimpediment133/Portfolio

Web-Osint #exploit #osint #password #recon #scanner #web
CyberTank OSINT Tool by Cybertank performs IP/phone lookup, WHOIS queries, port scanning, subdomain discovery, directory brute-force, SSL analysis, and tech stack detection.

https://github.com/cyberTank0/Web-Osint

WhoCord #scanner
Scans Discord links across mutual guilds to extract profiles, cross‑references 700+ sites, searches usernames with 30+ tools, and generates an AI‑powered report.

https://github.com/Siv-nick/WhoCord

prefixopt #pentest
High-performance CLI/GUI tool for optimizing, filtering, and analyzing IP prefix lists (IPv4/IPv6).

https://github.com/ReuxM13/prefixopt

osint-recon #exploit #osint #recon
An automated OSINT (Open Source Intelligence) reconnaissance tool that uses Google dorking techniques to gather publicly available information about domains and individuals. As well as extracting E...

https://github.com/Ahmedf000/osint-recon

nullai-api-security-scanner #scanner
OWASP API Security Top-10 scanner with GraphQL checks and parameter fuzzing

https://github.com/NullAILab/nullai-api-security-scanner

aws-cloud-security-scanner #cloud #scanner
An AI-powered AWS security scanner built with Python and Boto3

https://github.com/SabsRajan/aws-cloud-security-scanner

graphql-security-tester #scanner
Automated GraphQL endpoint security scanner — introspection, depth DoS, batch attacks, auth bypass, injection, alias amplification.

https://github.com/NullAILab/graphql-security-tester

spaf #exploit #recon
🛡️ AI-powered offensive security framework. Automated recon, CVE mapping, exploit POC generation & remediation using Gemini, Claude, Ollama & LM Studio.

https://github.com/geevarghesekthomas84-sys/spaf

WebPentestKit2 #web
SSTI · XXE · Deserialization — Three powerful modules, one command-line tool.

https://github.com/ozancolhak/WebPentestKit2

Trace-Foundry #bugbounty
Project Tools Bug Bounty Legal

https://github.com/aditXcode/Trace-Foundry

BanglaNumIntel #osint
Advanced OSINT tool for Bangladeshi phone numbers (+880) – mapping, social media discovery, breach search, and more.

https://github.com/Schizotypal-OSS/BanglaNumIntel

mcp-audit #scanner
Security scanner for MCP (Model Context Protocol) server configurations. Detects prompt injection, credential exposure, supply chain risks, and more.

https://github.com/adudley78/mcp-audit