SnailHunter #bugbounty
SnailHunter is a fully automated bug bounty hunting platform that combines traditional security tools with AI-powered analysis.

https://github.com/SnailSploit/SnailHunter

Usersearch-OSINT #osint
A tool similar to sherlock tool in my way

https://github.com/sonic-alt/Usersearch-OSINT

ghss #scanner
GitHub Actions Security Scanner

https://github.com/Valinora/ghss

Website-Security-Scanner #scanner #web
Website-Security-Scanner security / pentest utility.

https://github.com/tejdesai1256/Website-Security-Scanner

ai-plugin-scanner #scanner
Security and best-practices scanner for AI Plugins, covering Codex, Claude, Opencode, Gemini & more. Scores trust for plugins 0-100.

https://github.com/hashgraph-online/ai-plugin-scanner

spy_tool_ #pentest
Iam a legal ethical hacker. please you can not use my tool for illegally. This tool is available for only educational purpose only

https://github.com/hackers22100533-gif/spytool

LowHunt #osint
Native C-based OSINT tool for public data analysis and information gathering.

https://github.com/voltsparx/LowHunt

domloggerpp-caido #exploit
Monitor, intercept, and debug JavaScript sinks in Caido by centralizing findings from the DOMLogger++ browser extension for efficient analysis and triage.

https://github.com/Gmsher5817/domloggerpp-caido

reposcan #scanner
Scan cloned repositories for suspicious artifacts with this local, dependency-free security tool.

https://github.com/dyego63-arch/reposcan

oryon-action #scanner
Oryon headless security scanner and GitHub Action MVP

https://github.com/Guayamose/oryon-action

pi-psst #pentest
Inject vault secrets into bash commands and scrub sensitive data from AI agent outputs automatically.

https://github.com/twylatrumpetlike730/pi-psst

next-16.2.4-pocs #exploit
Next.js v16.2.4 Security PoC Collection (CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-445...

https://github.com/dwisiswant0/next-16.2.4-pocs

opsec-atlas #pentest
The Operator's Field Map for Offensive Security

https://github.com/msk3d0ut/opsec-atlas

server-hardening-guides #web
Production security checklists for self-hosted web applications — WordPress/Docker stack hardening, pentest-validated, adversarial-reviewed.

https://github.com/biyro02/server-hardening-guides

CHUNZA-Security #pentest
CHUNZA v1.6.0 @sdk57849/CHUNZA-Security

https://github.com/sdk12339/CHUNZA-Security

Security-Quiz-System #pentest
Security-Quiz-System security / pentest utility.

https://github.com/Ericktxy28967/Security-Quiz-System

Local-Model #pentest
Autonomous security agent on Kali Linux using Qwen 2.5-7B with LM Studio

https://github.com/XenoCoreGiger31/Local-Model

FlowiseAI-CVE-Chain-PoC #exploit
FlowiseAI CVE-2025-58434 & CVE-2025-59528 exploit PoC, demonstrating unauthenticated ATO via reset token leakage, followed by authenticated RCE. Includes a reproductible Docker lab environment.

https://github.com/0xDaeras/FlowiseAI-CVE-Chain-PoC

envleaks #scanner
Scan code, git history, and CI for exposed secrets, API keys, and credentials with 100+ patterns and SARIF output

https://github.com/Archducal-woodthrush229/envleaks

keyhog #scanner
The fastest, most accurate secret scanner. 896 detectors, Hyperscan SIMD, GPU acceleration, 96% recall. Built in Rust.

https://github.com/santhsecurity/keyhog