Security · GitHub

This document curates open-source projects, academic papers, capability benchmarks, and commercial solutions (international & China) in AI penetration testing, LLM red teaming, autonomous offensive agents, and vulnerability discovery—aimed at helping researchers, security engineers, and enterprise decision-makers quickly form a holistic view.

Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)

• Generate common listeners and reverse shells
• Save button to download Payloads from browser.

Search public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context.

A modular, free and open source System Data and Apple Intelligence cleaner for macOS.

AI jailbreaks: 35 paste-ready AI jailbreak prompts for 25+ frontier and open-weight models - system prompts, AGENTS.md specs, and Ollama Modelfiles. Built for AI security research and red-team testing.

Telegram WEB Proxy on Cloudflare Workers

A vulnerability scanner for container images and filesystems

• Scan container images, filesystems, and SBOMs for known vulnerabilities (see the docs for a full list of supported scan targets)
• Supports major OS package ecosystems (Alpine, Debian, Ubuntu, RHEL, Oracle Linux, Amazon Linux, and more)

Launcher, debloater and remapper for Samsung Tizen TVs: the all-in-one TV manager.

Open-source universal artifact registry. Drop-in Artifactory/Nexus alternative with 40+ package formats, security scanning, WASM plugins, and edge replication.

• 45+ Package Formats - Native protocol support for Maven, PyPI, NPM, Docker/OCI, Cargo, Go, Helm, and 38 more
• WASM Plugin System - Extend with custom format handlers via WebAssembly (WIT-based, Wasmtime runtime)

Open-source autonomous AI penetration testing. 50 specialist agents across web, API, cloud, Active Directory, Kubernetes, CI/CD and AI/LLM (OWASP LLM Top 10). Runs on a local LLM behind a Privacy Gateway. Integrates with GitHub, GitLab, Jenkins, VS Code, JetBrains, n8n, Grafana & Splunk.

An all-in-one hacking tool to remotely take over Android devices.

• Connect a device - Connect to a device remotely using ADB.
• List connected devices - Show all devices currently attached to ADB.

🐸 Identify anything. pyWhat makes it easy to identify emails, IP addresses, and more. Feed it a .pcap file or some text, and it will tell you what it is! 🧙‍♀️

Open-source desktop browser with a minimal Island interface, built-in ad and tracker blocking, private tabs, and releases for macOS, Windows, and Linux.

一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

A curated knowledge base to build, run and mature a SOC (including CSIRT).