Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

Scope aggregation tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

Teams-first Multi-agent orchestration for Claude Code

MCP Server for Burp

A Burp Suite extension that identifies elements in request packet that may affect the service

Community curated list of search queries for various products across multiple search engines.

The open source coding agent.

A list of the risks of vulnerabilities in web applications

Starter workspace to use with the CodeQL extension for Visual Studio Code.

Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.

Dopamine is a semi-untethered jailbreak for iOS 15 and 16

An open-source AI agent that brings the power of Gemini directly into your terminal.

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Open-Source Phishing Toolkit

The Postgres development platform. Supabase gives you a dedicated Postgres database to build your web, mobile, and AI applications.

Everything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥

Original Proof-of-Concepts for React2Shell CVE-2025-55182

HTTPLeaks - All possible ways, a website can leak HTTP requests

Tool to check for dependency confusion vulnerabilities in multiple package management systems

Caido Request Minimizer Plugin

PowerSploit - A PowerShell Post-Exploitation Framework

Jailbreak for A8 through A11, T2 devices, on iOS/iPadOS/tvOS 15.0, bridgeOS 5.0 and higher.

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Cybersecurity AI (CAI), the framework for AI Security

An open source collection of animated, interactive & fully customizable React components for building memorable websites.

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security