ScopeWeaver: English and Korean localization of ARTEX, with preserved AGPL-3.0 attribution.

Galah: An LLM-powered web honeypot. Wasting attackers' time with faker-than-ever HTTP responses!

Agentic AI security scanner that hunts exploitable vulnerabilities like an adversary, proves them with executable PoCs, and fixes them test-first. A maintained fork of Capital One's VulnHunter, reb…

Write HTML. Render video. Built for agents.

A framework for building realtime voice AI agents 🤖🎙️📹

Application Kernel for Containers

Qwen3.8-Flash-Next on any consumer hardware: one-click install for Windows / Linux. Strata inference engine, OpenAI/Anthropic API on localhost, optional image input.

Reverse engineer anything with agents, from app behavior down to native binaries.

Next-Gen Selfhosted Web Application Firewall (WAF) & Edge Reverse Proxy built in Go. Real-time threat defense, L7 traffic control, and unified admin console.

Reusable prompts for a structured, evidence-first bug bounty hunting workflow

Open-source, secure environment with real-world tools for enterprise-grade agents.

🌐 🔌 The MetaMask browser extension enables browsing Ethereum blockchain enabled websites

A cybersecurity harness for full-stack LLM-driven penetration testing. Find and fix vulnerabilities autonomously, 24/7. [RESEARCH PREVIEW]

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.

CVE-2026-43682: HFS+ B-tree kernel heap overflow in macOS

Autoharness — a self-learning skill layer for Claude Code — distills skills from your real sessions, updates them as you work, and prunes the ones that stop getting used. No daemon, no benchmark.

Snaffler in Python

An agent organization for Claude Code, structured as a company — 15+ departments, 125+ skills, each independently installable.

A collection of awesome penetration testing resources, tools and other shiny things

Reverse engineering analysis of PureRAT, a multi-stage RAT that executes via msbuild.exe and communicates with C2 servers at pure8s.ddnsfree.com and 52.241.248.38. Uses .NET evasion techniques (Dis…

Browser automation toolkit for QA, monitoring and internal workflows

A stealthy, fully syscalled C/C++ userland anti-debugging library for Windows, designed to protect software from reverse engineering

Claude Code sending messages locally to active sessions

poc it like it's hot

The Art of Exploit Development companion code.

Give your AI agent eyes to see the entire internet. Read & search Twitter, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu — one CLI, zero API fees.

A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

Local-first AI red team for web, API, and LLM application security. Attacker-style reasoning, evidence-backed findings, and skills for AI coding agents.

ASC is a super FAST Android decompiler front-end designed for Agents/Mobile Researchers.