Stars
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
【已复现】Fastjson 1.2.66–1.2.83 JsonType 纯库一键 RCE（AutoType 关闭仍可利用；完整 RCE 需 JDK8 + Spring Boot LaunchedURLClassLoader）。仅限授权安全研究与本地防御验证。
DVLAA (Damn Vulnerable LLM and Agent Application) is a local LLM and Agent security range for OWASP LLM Top 10 and Agent security training.
PhishOps是一款 Gophish 自动化部署工具，可基于 CI/CD 流云端一键部署增强版 GophishModified 平台，解决搭建繁琐痛点，大幅提升成本利用率。
Semantic-first multi-agent communication protocol — 4 concepts, 3 operations, infinite collaboration patterns
AI-driven pi-like agent for cyber security — single binary for pentest, red team, bug bounty
Run frontier MoE models on hardware you already own — pure C, zero deps, experts streamed from disk. Tiny engine, immense model. 🐦
Agent-driven automated CVE discovery platform for source code auditing, vulnerability verification, and report generation.
AI-powered bug bounty hunting from your terminal - recon, 20 vuln classes, autonomous hunting, and report generation. All inside Claude Code.
An open-source Secure Email Gateway (SEG) evaluation toolkit designed for red-teamers.
TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into product…
CanIBeSpoofed is a console project utilising functionality built for the https://caniphish.com/free-phishing-tools/email-spoofing-test website. This project facilitates scanning of domains to gain …
基于Ai-Thinker BW16-Kit RTL8720DN 的无线安全测试工具。包含WIFI功能：解除身份认证(Deauth)，信道干扰(Channel Interference)，Deauth/Disassoc帧检测(Detect)，密码钓鱼(Phishing)，认证/关联帧洪水攻击(Dos)，以及BLE功能：蓝牙弹窗攻击，蓝牙信标广播等。仅用于安全性研究和教育目的，请勿滥用。使用Ar…
ClawGod is a runtime patch applied to the official Claude Code. It continues to be supported with each version update.
Free interactive training materials in SCORM format
Standalone iOS app to spoof GPS location without jailbreak. Includes Shadowrocket/Surge/Loon/QX/Stash module.
在数字化浪潮下，钓鱼攻击已成为企业网络安全的主要威胁之一。仿冒网页、恶意邮件等钓鱼手段层出不穷，一旦员工不慎中招，可能导致企业核心数据泄露、系统瘫痪、财产损失等严重后果。在此背景下，阿波罗安全风险演练平台ApolloFish)应运而生，平台以“实战演练赋能安全意识提升”为核心目标，通过模拟真实的网页钓鱼、邮箱钓鱼场景，帮助企业精准检验员工安全防护能力，系统性强化全员安全意识，筑牢企业网络安全…
Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
Project Muteki (無敵): autonomous multi-model CTF-solving AI agent swarm
KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.
Helping AI Agent become an awesome practical hacker!