Stars
A CLI to create short-lived (8 hours) GitHub App User Access Token for secure local development
Real-time secret-leak guardrails for AI coding agents (Claude Code, Codex), Git hooks, and CI.
Small and highly portable detection tests based on MITRE's ATT&CK.
GitHub Action to configure PyPI clients (pip etc.) with Takumi Guard
Self-hosted GitHub App that validates Pull Request reviews. It helps organizations improve governance and security by ensuring PRs cannot be merged without proper approvals while keeping developer …
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
Use the GCP testIamPermissions functionality to bruteforce and discover your permissions
Shannon is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before t…
[PoC] Trusted Publishing verifier for package URLs (purl)
CVE-2024-4367 & CVE-2024-34342 Proof of Concept
58 MB Google Chrome to fit inside AWS Lambda Layer compressed with Brotli
A minimal network monitoring MCP tool for Playwright browser automation. **Just 3 simple tools** to capture, filter, and analyze network traffic during web automation.
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug b…
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
an open source, extensible AI agent that goes beyond code suggestions - install, execute, edit, and test with any LLM
Open-Source Remote Administration Tool For Windows C# (RAT)
📡 PoC auto collect from GitHub.
"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.