Claude Code plugin for writing triager-grade bug bounty reports

The HTTP/2 CLI for finding tiny timing differences and winning request races

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

modern javascript parser

make agents think, thoroughly

the runtime your coding agents live on

Archive of the Top 10 Web Hacking Techniques - every nominee since 2006, preserved

Zygisk module that intercepts Flutter app traffic — redirects to a proxy and bypasses BoringSSL TLS pinning. Persistent, no Frida session. Installable via MMRL.

Fabric is an open-source framework for augmenting humans using AI. It provides a modular system for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.

Rank Aid Recon

MCP server that connects AI assistants to HackerOne for bug bounty hunting

Sim is the collaborative workspace to build, deploy, and monitor AI agents and workflows. Used by 100,000+ builders.

Agentic Coding for Builders who Ship

⛰️ LifeOS — The universal AI Harness designed to move you from Current to Ideal state in both life and work.

API security testing framework for REST, GraphQL, and gRPC that validates authorization logic using role-based testing and YAML-driven templates

Fleex makes it easy to create multiple VPS on cloud providers and use them to distribute workloads.

List of Hourly Updated Fresh DNS resolvers

A monitoring hub that watches popular open-source repositories and uses AI to detect when commits are patching security vulnerabilities - often before a CVE is even assigned. Findings are published…

AndroHunter

Porch Pirate is the most comprehensive Postman recon / OSINT client and framework that facilitates the automated discovery and exploitation of API endpoints and secrets committed to workspaces, col…

GitHub Action to alert on security patches before the CVE drops.

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

This package is designed to bypass puppeteer's bot-detecting captchas such as Cloudflare. It acts like a real browser and can be managed with puppeteer.

This is a "skill" for claude to use FFUF.

Community-contributed instructions, agents, skills, and configurations to help you make the most of GitHub Copilot.

Automated JavaScript Debugging Tool using CDP - Automatically sets breakpoints for specified strings/patterns in JavaScript code