Exploit for the PwnKit Vulnerability

Exfiltrate blind Remote Code Execution and SQL injection output over DNS via Burp Collaborator.

Lightweight AI-friendly Docker Swarm management

Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitor…

Find the best models and how to run them locally.

openssh comma bypass poc

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works w…

AI coding assistant skill (Claude Code, Codex, OpenCode, Cursor, Gemini CLI, GitHub Copilot CLI, OpenClaw, Factory Droid, Trae, Google Antigravity). Turn any folder of code, docs, papers, images, o…

Calculate a site's favicon hash (MMH3) and pivot to every host sharing it on Shodan/Uncover

A Burp Suite extension for GraphQL security testing.

A powerful and efficient Go-based tool for extracting archived URLs from the Wayback Machine with advanced filtering capabilities, rate limiting, and automatic retries.

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

XRay is a tool for recon, mapping and OSINT gathering from public networks.

ASN / RPKI validity / BGP stats / IPv4v6 / Prefix / URL / ASPath / Organization / IP reputation / IP geolocation / IP fingerprinting / Network recon / lookup API server / Web traceroute server

command-line tool designed to rapidly scan decompiled Android applications for hardcoded secrets. It moves beyond simple keyword searching by using a powerful regex engine to identify high-entropy…

Using frida bypass anti hooking by native lib

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

Scripts and examples for "From Day Zero to Zero Day" by Eugene Lim.

Ultimate Burp Suite Exam and PortSwigger Labs Guide.

A database of 650 Machine Learning (ML) system design case studies from 100+ companies.

Autoswagger by Intruder - detect API auth weaknesses

AI Security Resources Hub

A comprehensive hands-on project for learning GPU programming with CUDA and HIP, covering fundamental concepts through advanced optimization techniques.

A comprehensive hands-on project for learning GPU programming with CUDA and HIP, covering fundamental concepts through advanced optimization techniques.

Adobe Experience Manager (AEM) hacking toolkit

Tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound

Python-based tool for identifying potential dependency confusion vulnerabilities in JavaScript (`package.json`) and Python (`requirements.txt`) projects