Starred repositories
Generate Claude Code bug bounty skills from public HackerOne reports and GitHub writeups — 18 vuln classes, no private reports needed
Modified BloodHound.py CE ingestor for red team use. Obfuscates LDAP through ldapx, paces LDAP searches and host RPC, and resumes a stopped collection. Writes BloodHound CE JSON.
User-friendly AI Interface (Supports Ollama, OpenAI API, ...)
A reliable coding agent for complex software engineering tasks.
Open-source temporary elevated access solution for AWS IAM Identity Center.
Collection of agent skills to find vulnerabilities inside your web/mobile apps.
Unprivileged user to root on macOS Sonoma, Sequoia, and Tahoe. Patched in macOS 26.6 / 15.7.8 / 14.8.8.
Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents
iOS Security and Exploiting skills for the Apple Bug Bounty | Kernel exploit | Sandbox escape | Security Research | Apple Pentesting.
Kiro is an agentic IDE that works alongside you from prototype to production.
Since the SecOps Group has offered free certification to Certified Appsec Practitioner I will be creating notes here. I will be working on the Certified Appsec Practitioner.
基于 AI Agent + MCP 工具链 + 渗透 Skill 编排， 配合大语言模型， 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。
CVE hunting harness for Claude Code - 20 skills, 5-agent team, systematic vulnerability research with false positive elimination
Skills for Real Engineers. Straight from my .agents directory.
NocoBase is an open-source AI + no-code platform for building business systems fast. Instead of generating everything from scratch, AI works on top of production-proven infrastructure and a WYSIWYG…
Offensive security toolkit for Claude Code covering red team, exploit dev, AD attacks, EDR bypass, mobile pentest
A powerful MCP toolkit for coding, providing semantic retrieval and editing capabilities - the IDE for your agent
Open Source Alternative to Vercel, Netlify and Heroku.
DeepSeek Harness: Everything is a Plugin.
CompTIA Security+ SY0-701 study guide with exam objectives, quick review, security operations, IAM, GRC, risk, incident response, and exam prep notes.
CVE-2026-54121(CertiGhost) without MachineAccountQuota POC
OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security
A Call of Duty-quality FPS in Three.js, built from a single prompt.
AI-powered bug bounty hunting toolkit that works with or without subscription.