Lists (29)
AI & LLM
APT
Asset Discovery
Backdoor & Rookit
Brute Force
C2
Cloud Security
Code Audit
Coding
Defense Evasion
Detection & Response
Discovery & Collection
Domain
Forensic Analysis
ICS & IOT
Infrastructure
Lateral Movement
Misc & Note
OSINT
Persistence
Pishing
Post Exploitation
Privilege Escalation
Proxy & Pivot
Reverse Engineering
Shell
Vulnerability
Web Security
Wireless
Stars
Open-source LLM knowledge platform: turn raw documents into a queryable RAG, an autonomous reasoning agent, and a self-maintaining Wiki.
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
Autonomous Hacking Agent for Red Team
A tool to convert windows registry export files into windows hive files that can be used to replace NTUSER.MAN
GPU tensor unlock source for RTX 4090 and experimental RTX 4070 Ti SUPER; firmware generated locally
Curated list of AI-powered developer tools.
Clean Indirect Syscalls with Syscall Tampering.
A collector and derivation engine. It maps your environment, evaluates effective permissions and trust, and writes a complete attack graph as a single .rage.ndjson file. The input to everything else.
Hidden Desktop Plugin For Havoc C2,Soon coming for Sliver.
Windows kernel driver and usermode app emulator for x86-64 and ARM64 targets.
Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before report.
By spoofing the domain name response information of dig to deceive DeepSeek/GLM into implementing automated penetration testing for you.通过修改dig的域名返回信息欺骗让deepseek /glm为你实现自动化的渗透测试
Reproducing Spyboy technique to terminate all EDR/XDR/AVs processes
Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code…
Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.
The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.
A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings
A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise ide…
RAPTOR autonomous looping multi-altitude security vulnerability hunt — Claude Code skill
Karpathy LLM based claude harness for PenetrationTesting / Bugbounty using obsidian
CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79 typed MCP tools, deterministic case pipeline + ICD-203 reports. No API keys r…
AI-powered bug bounty hunting toolkit that works with or without subscription.
Skill de Pentesting para Android
Claude Code skill to support Android app's reverse engineering
Use Garry Tan's exact Claude Code setup: 23 opinionated tools that serve as CEO, Designer, Eng Manager, Release Manager, Doc Engineer, and QA
An agentic skills framework & software development methodology that works.
Custom Adaptix-compatible C2 agent - PIC beacon + Stardust UDRL + Go extender plugins
Autonomous white-hat security auditor for AI-driven code review, bug bounty research, exploit construction, and execution-grounded verification.
实战 SRC / 众测 / Bug bounty 漏洞挖掘 Claude Code skill — 19 个攻击类 playbook、305 个结构化 payload、263 个 WAF/EDR 绕过、2887 份 HackerOne 真实案例、88,636 WooYun 案例统计