cli #scanner #web
Security scanner for Model Context Protocol (MCP) servers. Finds auth bypasses, injection vulnerabilities, CORS misconfigs, dangerous tool capabilities, and more. Scan HTTP/SSE endpoints or analyze...

https://github.com/mcpscanner/cli

hwid-spoofer-utility #pentest
Spoof hardware identifiers to bypass system-level bans and restrictions.

https://github.com/mani5717/hwid-spoofer-utility

ClaudeSec #pentest
AI-Driven White Hat Security Testing Framework

https://github.com/mmlqm/ClaudeSec

awesome-ai-security-tools #pentest
- name 🟢/🔬/🟠/⚠️ — One-line description. (maintainer/org) <stars badge> <last-commit badge>

https://github.com/scadastrangelove/awesome-ai-security-tools

vibesec #pentest
Pre-deploy security audit skill for vibe-coded apps. Catches unauthenticated admin APIs, missing RLS, leaked service keys before you ship.

https://github.com/tawgroup/vibesec

Glitter-Pentesting-Tool #exploit #scanner #web
Security research and PoC exploit suite targeting the custom "Glitter" social media protocol. Developed for the Magshimim cyber education program, this repository demonstrates network protocol anal...

https://github.com/yoavlach/Glitter-Pentesting-Tool

CVE-2025-47227 #exploit #password
Exploit for CVE-2025-47227 - ScriptCase Password Reset (Pre-Auth)

https://github.com/Outs1d3r-Net/CVE-2025-47227

CVE-2025-24893 #exploit
Exploit de Execução Remota de Código (RCE) no XWiki

https://github.com/hasecto/CVE-2025-24893

Shada #ad #exploit #password
Autonomous AI-powered Active Directory pentesting framework — 73 agents, 55+ CVEs, Mimikatz/Certipy/hashcat tool chain, BloodHound-style BFS graph, MITRE ATT&CK mapping (132 IDs), real-time dashboard.

https://github.com/incur8yws/Shada

Laitoxx-Multi-Tool-TUI #pentest
Laitoxx Multi-Tool fork

https://github.com/BadPrivacyclub/Laitoxx-Multi-Tool-TUI

pentest-tool #pentest
powershell

https://github.com/ju4nth3ripper/pentest-tool

garrettstimpson.ca #web
Garrett Stimpson is a cybersecurity enthusiast and developer focused on ethical hacking, CTFs, automation, AI, and modern web technologies. Passionate about building tools, exploring APIs, and crea...

https://github.com/gary23w/garrettstimpson.ca

ZeroTrace #pentest
ZeroTrace is a powerful ethical hacking tool for anonymization, routing all your system network traffic through the Tor network, making it very hard to track your online activity, IP address, and l...

https://github.com/s-r-e-e-r-a-j/ZeroTrace

foxhen-safe-bounty-scope-checker #pentest
Use this repo to evaluate payment risk, authorization clarity, safe-scope boundaries, effort, blockers, and approval gates before pursuing work.

https://github.com/foxandhenllc/foxhen-safe-bounty-scope-checker

media-transfer-scan-tool #scanner
Static security scanner for media-transfer review — multi-file-type (Python, Office/PDF, shell, PS, npm, model files)

https://github.com/StevenMcGann/media-transfer-scan-tool

ai-api-security-scanner #scanner
Automated API security compliance scanner for CI/CD pipelines

https://github.com/aisecuritytools-ai/ai-api-security-scanner

specification.website #exploit #web
Website specification — HTML, accessibility, security, SEO, agent-readiness. Platform-agnostic, sourced, MIT.

https://github.com/jdevalk/specification.website

CVE-2026-46376 #exploit
CVE-2026-46376 - FreePBX Unauthenticated UCP Access via Hard-Coded Credentials

https://github.com/portbuster1337/CVE-2026-46376

nsauditor-ai #exploit #scanner
NSAuditor AI — Open-source, AI-powered network security scanner. 27 plugins, CVE matching, MITRE ATT&CK mapping, verified vulnerabilities, continuous monitoring, MCP integration. Zero data exfiltra...

https://github.com/nsasoft/nsauditor-ai

Fortify #exploit #scanner #web
Open-source web app security scanner

https://github.com/Givemeboga/Fortify

ReconSR #osint #recon
ReconSR is an automated OSINT tool designed to provide cybersecurity researchers with a modular framework for mapping and analyzing complex digital footprints and attack surfaces.

https://github.com/cdua-org/ReconSR