Curated list of open-source AI-assisted penetration testing tools, frameworks, CTF agents, and benchmarks

An overview of LLMs for cybersecurity.

LLM Agent and Evaluation Framework for Autonomous Penetration Testing

Finding ClickFix and FakeCAPTCHA like it's 1999

rust 🦀 implementation of soulseek client

Educational PoC + lab for CVE-2026-63030 + CVE-2026-60137: pre-auth SQLi in WordPress core via REST batch-route confusion

CVE-2026-63030

Non-destructive detector + Docker lab for wp2shell (CVE-2026-63030 REST /batch/v1 route confusion + CVE-2026-60137 author__not_in SQLi) in WordPress core 6.9.0-6.9.4 / 7.0.0-7.0.1

A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if hand…

A simple tool designed to create Atomic Red Team tests with ease.

Quickly create and run optimised Windows, macOS and Linux virtual machines

RoguePlanet Windows Defender Vulnerability

🌱 Private, quiet space for thinking. Simple app for .md files.

Fast and Accurate Code Search for Agents. Uses 99% fewer tokens than grep+read

This tool converts OVA (Open Virtual Appliance) or VMDK (Virtual Machine Disk) files to Docker container format.

A GUI app for Omarchy Linux.

https://youtu.be/zuDu-jsdS34

IRC application written in Rust

Moved to git.inthemansion.com/MansionNET/ascii-art-generator

Turn your Telegram account into an unlimited, secure cloud storage drive. an Open-source desktop app built with Tauri, Rust, and React.

DarkSword webkit exploit captured ITW

iOS <=26.0.1 DarkSword Kernel Exploit reimplemented in Objective-C

Fully automatic censorship removal for language models

Awesome Incident Response

Simple HTTP async comms using standard GET/POST requests

Poseidon is a Golang agent targeting Linux and macOS

Welcome to this Flipper Zero BadUsb script collection! These scripts were made with love. By downloading the files, you automatically agree to the MIT license and the terms outlined in the ReadMe. …

A Collection of Over 60 Scripts - updated specifically for the BadUSB function on the FlipperZero.