A curated collection of offensive, defensive and AI/LLM security tools.

A Bloodhound alternative. BloodBash will ingest the same files bloodhound does but no server is required to use this tool. It's great for quick AD enumeration.

Orchestrate AI agents to find real vulnerabilities in code.

Visualize, collaborate, and evolve the software architecture with always actual and live diagrams from your code

Open-source & free — Battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in fine-tuned ruleset (NPE, thre…

Self-hosted deployment platform

An auto-company works for 24/7 on your own PC - Windows/Linux/macOS.

Open-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation. MIT-licensed, self-hostable.

TokenSmith generates Entra ID access & refresh tokens on offensive engagements. It is suitable for both covert adversary simulations and penetration tests with the tokens generated working out of t…

A modular, stack-agnostic toolkit of security review skills for AI coding agents to autonomously find, reproduce, and patch vulnerabilities.

The malicious IdP you were looking for. A weaponized Single Sign-On (SSO) Identity Provider (IdP) for security testing of OIDC and SAML 2.0 Service Providers, also supporting SCIM protocol.

A terminal-based SSH manager inspired by lazydocker and k9s - Written in go

Integrate LLM models directly into Ghidra for AI-enhanced reverse engineering.

IP lists full of bad IPs - Updated every 2H

A high-speed covert tunnel that disguises TCP traffic as SMTP email communication to bypass Deep Packet Inspection (DPI) firewalls.

Sec-Gemini is a cutting-edge AI model designed to enhance cybersecurity capabilities and empower defenders in the ongoing battle against cyber threats.

CVE2PoC is a tool that helps penetration testers, bug hunters, and security researchers quickly find public exploits or PoCs related to a CVE ID

Stop wasting tokens and re-explaining your project every session. Recall gives Claude Code durable memory — entirely offline.

Stop wasting tokens and re-explaining your project every session. Recall gives Claude Code durable memory — entirely offline.

An AI SKILL that provide design intelligence for building professional UI/UX multiple platforms

A companion tool that uses ADeleg to find insecure trustee and resource delegations in Active Directory

AI Security Scanner - Test your AI systems for prompt injection and extraction vulnerabilities

A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code…

A hand-picked collection of the finest of resources for the most awesome of agents, Claude Code, the undisputed champion of coding companions, from the unstoppable team at Anthropic PBC. A delectab…

The ultimate pentesting companion. Keep all your pentesting artifacts in one place.

RoguePlanet Windows Defender Vulnerability

AI-powered Docker security scanner that explains vulnerabilities in plain English. An OWASP Lab Project.

Skills for threat modeling, scanning, triage, patching, plus an autonomous scanning harness you can /customize

AI-native red-team workbench for authorized penetration testing and vulnerability research, with specialist agents, sandboxed tooling, evidence records, and replayable timelines.