Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command li…

This document curates open-source projects, academic papers, capability benchmarks, and commercial solutions (international & China) in AI penetration testing, LLM red teaming, autonomous offensive…

AiScan-N 来了！这是一款基于人工智能驱动的Ai自动化网络安全（运维）工具，专注于网络安全评估、漏洞扫描、运维、应急响应、渗透测试自动化，Ai大模型工具集【CLI Agent】 ，Ai驱动的安全检测技术，提升安全测试（运维）效率，专为企业和个人用户打造，尤其适合初学者（小白）快速上手使用，让你轻松迈入智能安全攻防时代！适用场景 ：如（红队演练、CTF比赛、Web应用渗透测试、内网横向移…

A Security Tool for Bug Bounty, Pentest and Red Teaming.

404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目

一个 AI 攻防知识库。A knowledge base for AI security.

Wordpress Pre-auth XSS to RCE exploit PoC (xss2shell & CVE-2026-64638)

CF-Hero is a reconnaissance tool that uses multiple data sources to discover the origin IP addresses of Cloudflare-protected web applications

AIGoat - Open-source AI security playground for LLM red teaming. AI Goat provides hands-on labs covering the full OWASP LLM Top 10 with progressive defenses.

Distribute and run LLMs with a single file.

This is a PAM Skeleton Key that can be used for persistence, lateral movement, and privilege escalation.

A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise ide…

forked from Nightmare-Eclipse GreenPlasma-main

Repository hosting the bluehammer vulnerability

YellowKey Bitlocker Bypass Vulnerability

CVE-2020-17103 was apparently not patched or the patch was reversed, regardless this the PoC for an LPE in cldflt.sys

Forked from https://github.com/Nightmare-Eclipse/UnDefend

Forked from https://github.com/Nightmare-Eclipse/RedSun

bitlocker bypass

Reattempt of BlueHammer disclosed in April 2026

CVE-2020-17103 adapted for C2 with split-binary SYSTEM callback

CVE-2020-17103 was apparently not patched or the patch was reversed, regardless this the PoC for an LPE in cldflt.sys

uClinux plus my own patches, based on uClinux-dist-20110810.

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision

CVE-2026-46333

AI-powered modular Active Directory red-team framework for authorized penetration testing, AD enumeration, attack-path analysis, Kerberos/ADCS workflows, reporting, operator automation, and MCP ser…

Implementation of Max Kellermann's exploit for CVE-2022-0847

Dirty COW