Termux - a terminal emulator application for Android OS extendible by variety of packages.

Full-coverage bug bounty framework — 33 tools across recon, attack surface (OAuth/SSRF/JWT/GraphQL/SQLi/LFI/prototype pollution/cloud/apk/recon), finding pipeline, reporting, and monitoring. Async,…

Termux-native static analysis framework for bug bounty — Semgrep-compatible YAML rulesets across 12 industries (ecommerce, healthcare, fintech, cloud, media, crypto, gaming, gov, telecom, edtech, a…

End-to-end JS bundle analysis pipeline for Termux — deobfuscation, secret scanning, chunk dependency graph, sourcemap follow, CI-ready reporting

A tool to help security researchers extract available user inputs and endpoints to run tests on.

High-performance C++20 web scraping framework. Async-first, pluggable transports (curl/ASIO/CDP), selectolax/gumbo parsers, middleware chain (retry, rate-limit, proxy rotation, cookies), YAML-drive…

Comprehensive toolkit for discovering, validating, and reporting exposed Google API keys (AIza format). Multi-service scanner (24 endpoints), Burp extension, capability testing, referer bypass, evi…

Automated bug bounty reconnaissance and exploitation pipeline — subdomain takeover, JS secret scanning, cloud exposure, OAuth probing, SSRF detection, and more

Hand-rolled, zero-dependency static analysis engine for JavaScript bundles, built for security researchers analyzing minified, framework-heavy production code. Combines structural AST analysis, int…

Karpathy LLM based claude harness for PenetrationTesting / Bugbounty using obsidian

The open-source CapCut alternative

A complete AI agency at your fingertips - From frontend wizards to Reddit community ninjas, from whimsy injectors to reality checkers. Each agent is a specialized expert with personality, processes…

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

An agentic skills framework & software development methodology that works.

Prediction-market agent arena for AI agent evaluation, paper trading, practice rounds, contests, and leaderboard-based battle testing.