Stars
Autonomous pentest legion — AI commander + worker swarm + layered fact-intent graph. 3rd Tencent Intelligent Attack-Defense online champion (634 teams · 8h unattended · 1B tokens beat 4.5B). The Nü…
An enterprise-class UI design language and React UI library
a static analysis tool for finding vulnerabilities in C/C++ source code
智能渗透Agent Manager/Observer/Solver 多角色架构，基于 pi-mono SDK。
VulnWatchdog 是一个自动化的漏洞监控和分析工具。它可以监控 GitHub 上的 CVE 相关仓库,获取漏洞信息和 POC 代码,并使用 GPT 进行智能分析,生成详细的分析报告。
DeepSeek Harness: Everything is a Plugin.
CVE proof-of-concept labs, exploit scripts, and detection/prevention rules (Nginx, Apache, Snort, YARA) for high-severity CVEs. Authorized security testing & research only.
一个基于LLM的多Agent全流程漏洞挖掘项目，支持PHP、Java、Python、Go、Node.js等多种语言项目环境搭建、漏洞分析、漏洞验证、报告产出。支持多Agent并发高效率沟通完成漏洞挖掘任务。
Claude Code RedTeam Skill — Hypothesis-Driven Cognitive Architecture。一个假设-证据驱动的红队skill
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
A cross-platform desktop All-in-One assistant for Claude Code, Codex, OpenCode,DeepSeek Harness and more. Only official website: ccswitch.io
Open-source attack surface management and authorized security automation platform for asset discovery, service probing, scan orchestration, and security result management.
焦糖布丁（Caramel Pudding）是一款专为 OpenClaw AI Gateway 打造的安全基线与漏洞检测工具，集成 12 大核心检测模块（配置安全、技能包安全、端口暴露、认证口令、供应链、主机安全、密钥泄露、反代配置、运行时检查、漏洞扫描、安全基线、数据泄露防护）与龙虾安全守卫功能（安全审计、自动加固、技能扫描、文件完整性、隐私检查、行为检测），支持 Ollama 本地模型与云…
在ShiroAttack2基础上增加 Header 长度绕过、分块、短 Payload等功能
Confluence CVE 2021，2022，2023 利用工具，支持命令执行，哥斯拉，冰蝎 内存马注入
Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more
Yet another WeChat Mini-Program Framework (WMPF) debugger
全自动化，微信小程序反编译 wxapkg 包 源代码还原工具, 线上代码安全审计，支持 Windows, Macos, Linux
Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters
BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).
Program for determining types of files for Windows, Linux and MacOS.