Agentic AI security tool that applies proactive, attacker-first analysis directly to source code.

Autonomous AI pentesting engine, continuous offensive security across web, cloud, identity, CI/CD, IaC, databases, Active Directory, Kubernetes and IoT firmware. Agentic reasoning plus real exploit…

An 8-stage vulnerability-discovery agent.

A list of Cheatsheet compiled by CloudBreach Team

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

Offset Independent Credential Extraction Tool

Azure AppHunter is an open-source tool created for security researchers, red teamers and defenders to help them identify excessive privileges assigned to Service Principals

Burp extension for Recursive Request Exploits (RRE) — DEFCON 2025

OPC UA test and exploitation tools

OctapusPrime One‐Touch Pentest Suite

Overlord - Red Teaming Infrastructure Automation

The SpecterOps project management and reporting engine

This project deploys a robust infrastructure on Azure to handle a high scale moodle installation, this environment is able - and tested - to handle 200k concurrent users.

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

Command line interface to dump LSASS memory to disk via SilentProcessExit

Six Degrees of Domain Admin

The recursive internet scanner for hackers. 🧡

Patch AMSI and ETW

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

Automation for internal Windows Penetrationtest / AD-Security

Standalone implementation of a part of the WSUS spec. Built for offensive security purposes.

"Can I take over DNS?" — a list of DNS providers and how to claim vulnerable domains.

Ansible roles to deploy RedELK

A light-weight first-stage C2 implant written in Nim (and Rust).

Active Directory data ingestor for BloodHound Legacy written in Rust. 🦀

UI-Lovelace-Minimalist is a "theme" for HomeAssistant

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

a drop-in replacement for Nmap powered by shodan.io