Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently supports Azure DevOps, GitHub and GitLab.

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

🐍 🔍 GuardDog is a CLI tool to Identify malicious PyPI and npm packages

Ghost Security's collection of AppSec skills for AI coding agents

Give your AI agent a Pup — a CLI companion with 200+ commands across 33+ Datadog products.

An AI-powered agentic red team framework that automates offensive security operations, from reconnaissance to exploitation to post-exploitation, with zero human intervention.

🦌 The AI Elasticsearch Engineer

Ralph is an autonomous AI agent loop that runs repeatedly until all PRD items are complete.

Gas Town - multi-agent workspace manager

Sandboxed devcontainer for running Claude Code in bypass mode safely. Built for security audits and untrusted code review.

⚡ Vigil ⚡ Detect prompt injections, jailbreaks, and other potentially risky Large Language Model (LLM) inputs

the LLM vulnerability scanner

🧠 LLMFuzzer - Fuzzing Framework for Large Language Models 🧠 LLMFuzzer is the first open-source fuzzing framework specifically designed for Large Language Models (LLMs), especially for their integra…

Your own personal AI assistant. Any OS. Any Platform. The lobster way. 🦞

Cybersecurity AI (CAI), the framework for AI Security

Runtime protection for AI agents

Agent Orchestration Command Center

An AWS IAM Privilege Escalation Path Library

Minimal CLI coding agent by Mistral

Original Proof-of-Concepts for React2Shell CVE-2025-55182

Explanation and full RCE PoC for CVE-2025-55182

#supply #chain #attack #detection

Project for generating and identifying deceptive LNK files.

A tiny CLI for bossing around OpenAI Images and Gemini without installing someone's KPI farm.

Lightweight wrapper for generating and editing images from Gemini 2.5 Flash Image/Nano Banana

A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID

🎒 Token-Oriented Object Notation (TOON) – Compact, human-readable, schema-aware JSON for LLM prompts. Spec, benchmarks, TypeScript SDK.