Starred repositories
A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers.
Prompts for performing tests on your Kali Linux using Gemini-cli, ChatGPT, DeepSeek, CursorAI, Claude Code, and Copilot.
Personal AI Infrastructure for upgrading humans.
Repository for CoSAI Workstream 4, Secure Design Patterns for Agentic Systems
Hands-on MCP security lab: 10 real incidents reproduced with vulnerable/secure MCP servers, pytest regressions, and Claude/Cursor battle-tested exploit walkthroughs
DevOps agent that won't accidentally tweet your AWS credentials 🦀
Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we confi…
A repository showcasing my discovered CVEs, including vulnerability details, exploit insights, and responsible disclosure timelines.
Monorepo of Labs for the Security Knowledge Framework (SKF)
This repository is a carefully chosen collection of cloud security-related interview questions and scenarios. This resource will help you explore different areas of safeguarding cloud systems, whet…
A list of cloud security tools and vendors.
A curated list of annual cyber security reports
Creating this repository as a central hub for all DevOps interview questions to help you land your next job.
Automated Fail2Ban Monitoring with AWS CloudWatch, SNS, and CloudWatch Dashboards — integrated via CI/CD pipeline.
An intentionally vulnerable AI chatbot to learn and practice AI Security.
MCP Checkpoint continuously secures and monitors Model Context Protocol operations through static and dynamic scans, revealing hidden risks in agent-to-tool communications.
Verification of Least Privilege, Encryption, and Network Security on AWS S3
Open-source AI agents for penetration testing
An interactive security testing platform that demonstrates real vulnerabilities in Large Language Models.
A Burp Suite extension for analyzing Next.js Server Actions - server-side functions identified by hash IDs and `Next-Action` headers.
As a bug hunter, are your bug bounty reports getting rejected because you don't use a "malicious" Proof of Concept (PoC) app to exploit the vulnerabilities? I've got you covered!