Apache Fineract

A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

A deliberately vulnerable banking application designed for practicing Security Testing of Web App, APIs, AI integrated App and secure code reviews. Features common vulnerabilities found in real-wor…

A practical security workbook for reviewing source code, identifying vulnerabilities, validating findings with test cases, and automating secure code reviews.

Pentest Harness — Heaven for Hackers. A self-hosted AI agent harness for authorized pentests, bug bounty, security labs, and CTFs. Bring your own AI model API; sessions stay local.

Create organizations where AI agents and humans work side by side

Light, fluffy, and always free - The AWS Local Emulator alternative

🚀 Caido releases, wiki and roadmap

Offensive security platform that automates attack surface discovery and vulnerability management

The Big Brother V5.0 is a weaponized OSINT platform featuring username enumeration (473+ platforms), quad-vector visual intelligence, Sky Radar tracking, crypto wallet analysis, SSL intelligence, d…

Python Exploitation Framework, V8 Engine Debugger, Proxy interceptor, marketplace, post-exploitation, backdoor generator,....

Model Context Protocol Servers

Reusable GitHub Action for AI-powered code review with Claude

OWASP API Security Project

CLI component of OWASP PurpleTeam

GitHub Attack Toolkit - Extreme Edition

Automated Penetration Testing Agentic Framework Powered by Large Language Models

A collection of skills for AI coding agents from Semgrep

Open-source AI hackers to find and fix your app’s vulnerabilities.

AI-powered security scanner for developers — 18 agents, 80+ attack classes, one command

AIRecon is an autonomous cybersecurity agent that combines a self-hosted Large Language Model (Ollama) with a Kali Linux Docker sandbox and a Textual TUI. It is designed to automate security assess…

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

🪨 why use many token when few token do trick — Claude Code skill that cuts 65% of tokens by talking like caveman

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks.

Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.

🧵 CLI tool for directly patching container images!

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

Created by High-Tech Bridge, the Purposefully Insecure and Vulnerable Android Application (PIVAA) replaces outdated DIVA for benchmark of mobile vulnerability scanners.