SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

Offensive security toolkit for Claude Code

eBPF-based Security Observability and Runtime Enforcement

Terraform AWS provider

Secure sharing of secrets, passwords and files

Flipper Zero Firmware

An extensible multilanguage static code analyzer.

Security Scanner for Agent Skills

The public release of LeftoverLocals code

HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug b…

Proxy for enforcing webauthn authentication, written in Go

MUCH Improved version of the Python Chasing Your Tail Tool to help you determine if you're being followed

all of the workflows of n8n i could find (also from the site itself) - fork created due to DMCA which also prevented my being able to remove the fork squatting in the namespace, GH do better.

A powerful coding agent toolkit providing semantic retrieval and editing capabilities (MCP server & Agno integration)

Six Degrees of Domain Admin

ZincSearch. A lightweight alternative to elasticsearch that requires minimal resources, written in Go.

Open-Source Phishing Toolkit

MergeStat enables SQL queries for data in git repositories (and related sources, such as the GitHub API). It allows you to ask questions about the history and contents of your source code.

A collection of phishing samples for researchers and detection developers.

Fast and customizable vulnerability scanner based on simple YAML based DSL.

A PoC ransomware sample to test out your ransomware response strategy.

These are tools we released with our 2020 defcon/blackhat talk https://www.youtube.com/watch?v=Ml09R38jpok

a prompt injection scanner for custom LLM applications

This upload contains the artifacts for the paper "SLAP: Data Speculation Attacks via Load Address Prediction on Apple Silicon", to appear at the 2025 IEEE Symposium on Security and Privacy.