Git. Ship. Done - Core

Breakthrough Method for Agile Ai Driven Development

Awesome OAuth security: OAuth2.0 and OpenID from an information security perspective

🐍 A toolkit for testing, tweaking and cracking JSON Web Tokens

Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code…

This module performs an MSSQL TDS downgrade attack with integrated ARP spoofing and firewall rules setup to redirect traffic. If encryption is optional, a MITM attack can downgrade the TDS encrypti…

Stealth headless browser for AI agents — bypass Cloudflare, bot detection, and anti-scraping. Drop-in Puppeteer/Playwright replacement.

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug b…

Fully autonomous AI Agents system capable of performing complex penetration testing tasks

claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a s…

best tool for finding SQLi,CRLF,XSS,LFi,OpenRedirect

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

How To approach recon on real targets — from passive enumeration to origin IP discovery. Covers tools, automation, and the logic behind each phase.

Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, a…

Small and highly portable detection tests based on MITRE's ATT&CK.

CredsHunter - Credential Hunting scripts for Windows and Linux OS

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works w…

The context API to search, scrape, and interact with the web at scale. 🔥

User-friendly AI Interface (Supports Ollama, OpenAI API, ...)

My OSCP Pre-Preparation Phase. I'm not sure if I'll be able to afford the exam but what count's trying and learning things. I'm gonna give it a try. [Start Date: 21st March 2022]

Most usable tools for iOS penetration testing

Self-hosted AI workspace.

Real-world infosec wordlists, updated regularly

Collaborative cheatsheets for console commands 📚.

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

Linux enumeration tool for pentesting and CTFs with verbosity levels

⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

Obtain GraphQL API schema even if the introspection is disabled

Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!