Lists (9)
Starred repositories
Vulnerable Docker containers designed to simulate vulnerable services for enthusiasts looking to sharpen their skills in identifying, exploiting, and enumerating vulnerabilities in a controlled env…
An intentionally designed broken web application based on REST API.
VulnerableApp-facade is probably most modern lightweight distributed farm of Vulnerable Applications built for handling wide range of vulnerabilities across tech stacks.
OWASP VulnerableApp Project: Break it. Scan it. Reproduce it. Benchmark against it. Improve it.
Prevent merging of malicious code in pull requests
Automated web vulnerability scanning with LLM agents
A general purpose cheat sheet for pentesting and OSCP certification
A fast, simple, recursive content discovery tool written in Rust.
CacheShadow is a comprehensive security tool designed to detect cache poisoning vulnerabilities in web applications. It tests for multiple attack vectors including unkeyed headers, query parameter …
Agentic LLM Vulnerability Scanner / AI red teaming kit 🧪
Welcome to the Hotstar App Deployment project
world's first Opensource fully Autonomous AI Security Engineer
A tool to automatically redirect all traffic through the TOR and change the IP every 0 to x seconds. And provides a custom MAC address. </>
NeuroSploit is an advanced, AI-powered penetration testing framework designed to automate and augment various aspects of offensive security operations. Leveraging the capabilities of large language…
AutoPentest-DRL: Automated Penetration Testing Using Deep Reinforcement Learning
GyoiThon is a growing penetration test tool using Machine Learning.
AI-powered penetration testing assistant for automating recon, note-taking, and vulnerability analysis.
AgentFence is an open-source platform for automatically testing AI agent security. It identifies vulnerabilities such as prompt injection, secret leakage, and system instruction exposure.
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
Cybersecurity AI (CAI), the framework for AI Security
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
A universal MCP client with proxying feature to interact with MCP Servers which support STDIO transport.
A powerful Go tool for finding origin IPs of domains by querying multiple security APIs and validating results with built-in HTTP client.
Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!
Writeups of challenges and CTFs I participated in