Orchestrate multiple coding agents from desktop and mobile

nuclei file protocol engine

A tool for creating and running Linux containers using lightweight virtual machines on a Mac. It is written in Swift, and optimized for Apple silicon.

Local-first code intelligence graph for MCP and CLI. Builds a persistent map of your codebase so AI coding tools read only what matters, with benchmarked context reductions on reviews and large-rep…

AI-native red-team workbench for authorized penetration testing and vulnerability research, with specialist agents, sandboxed tooling, evidence records, and replayable timelines.

openSquat is an open-source tool that detects look-alike domains impersonating your brand, by scanning newly registered domains daily.

ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes

一款用于快速打点JS文件及路径扫描的单兵工具 / A single player tool for quickly scanning JS files and paths

PHP-Code-Audit-Skill是一个专注于PHP代码审计的Skill

AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

A AI general-purpose state-space search engine, validated first on autonomous penetration testing.

Zap is an open, local-first terminal with first-class AI and agent support.

The most advanced free and open-source browser fingerprinting library

OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by t…

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

🕵️‍♂️ Offensive Google framework.

Official inference framework for 1-bit LLMs

Ultra-lightweight, open-source, self-hosted personal AI agent framework in Python with WebUI, tools, memory, MCP, multi-agent workflows, automation, and chat apps

Undetected version of the Playwright testing and automation library.

MimiClaw: Harness on a $5 chip. No OS(Linux). No Node.js. No Mac mini. No Raspberry Pi. No VPS. Hardware agents OS.

Mobile and Web client for Codex and Claude Code, with realtime voice, encryption and fully featured

wooyun-legacy skill for claude code

微舆：人人可用的多Agent舆情分析助手，打破信息茧房，还原舆情原貌，预测未来走向，辅助决策！从0实现，不依赖任何框架。

FastBurp 是一款专为网络安全测试和Web开发设计的浏览器扩展工具。它通过利用Chrome浏览器的原生调试API，实现了无需额外安装证书进行HTTPS流量拦截、修改和重放，并结合AI技术提供智能化的安全分析功能。

AgentCPM-GUI: An on-device GUI agent for operating Android apps, enhancing reasoning ability with reinforcement fine-tuning for efficient task execution.

deadpool代理池工具，可从hunter、quake、fofa等网络空间测绘平台取高质量socks5代理，或本地导入socks5代理，轮询使用代理进行流量转发。

网络空间资产测绘、ICP备案、天眼查股权结构图、端口扫描、指纹识别、小程序敏感信息提取。

Cobalt Strike Malleable C2 Design and Reference Guide