Antidote to VibeCoding

An AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat models for a given application based on the STRIDE methodology.

Generate MITRE ATT&CK and D3FEND from a list of CVEs. Database with CVE, CWE, CAPEC, MITRE ATT&CK and D3FEND Techniques data is updated daily. Showcased at BlackHat Europe 2025 Arsenal.

Generative AI Threat Modeler

STIX data representing MITRE ATT&CK

User-friendly AI Interface (Supports Ollama, OpenAI API, ...)

Turn docstrings into LLM-functions

Extract URLs, paths, secrets, and other interesting bits from JavaScript

Access large language models from the command-line

Build robust LLM applications with true composability 🔗

Python library to manipulate ESC/POS printers

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Automagically reverse-engineer REST APIs via capturing traffic

Generate modern Python clients from OpenAPI

Student details, source code, and more for our HTMX + Flask: Modern Python Web Apps, Hold the JavaScript course.

Turbo Intruder Scripts

Obtain GraphQL API schema even if the introspection is disabled

This repository contains various media files for known attacks on web applications processing media files. Useful for penetration tests and bug bounty.

⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

Flash firmware to STM32 microcontrollers using Python.

Wrapper to inject an Objection/Frida gadget into an APK, with support for app bundles/split APKs.

A collection of statically compiled tools like Nmap and Socat.

Adds a window to Binary Ninja that explains in simple-ish English what an instruction does

TCP connection hijacker, Rust rewrite of shijack

</> htmx - high power tools for HTML

Jaqen - Simple DNS rebinding

symbolic execution plugin for binary ninja