Awesome Large Language Models for Vulnerability Detection

Software Reliability & Correctness Skills

Ares is an autonomous security operations platform where LLM-driven red and blue team agents operate against each other on live infrastructure, enabling realistic evaluation of attack and defense.

Teams Free Bundle Usage Bypass Toolkit

AI-powered offensive security testing using autonomous agents, directly in your terminal.

A Claude Code plugin that shows what's happening - context usage, active tools, running agents, and todo progress

🕶️ Awesome stuff for Obsidian

Web UI for training and running open models like Gemma 4, Qwen3.6, DeepSeek, gpt-oss locally.

Hundreds of models & providers. One command to find what runs on your hardware.

mini cli search engine for your docs, knowledge bases, meeting notes, whatever. Tracking current sota approaches while being all local

Distributed inference for mobile, desktop and server.

Capture HTTP/HTTPS traffic from Android apps and send to Proxyman for debugging.

Capture HTTP/HTTPS, and Websocket from iOS app without proxy.

DFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with built-in process inspection, lateral movement tracking, persistence detection, and V…

Windows protocol library, including SMB and RPC implementations, among others.

Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists

Browser automation CLI for AI agents

A curated list of awesome resources about Electron.js (in)security

The modern Java bytecode editor

Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we confi…

📚 免费的计算机编程类中文书籍，欢迎投稿

rep+ — Burp-style HTTP Repeater for Chrome DevTools with built‑in AI to explain requests and suggest attacks

A library for building fast, reliable and evolvable network services.

A Burp Extension to test applications for vulnerability to the Web Cache Deception attack

Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated deco…

🔗 A curated list of awesome Caido related projects

🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.

♾️ Collection and Roadmap for everyone who wants DevSecOps. Hope your DevOps are more safe 😎