Clawsec Plugin

The ultimate OWASP MCP Top 10 security checklist and pentesting framework for Model Context Protocol (MCP), AI agents, and LLM-powered systems.

Fast, small, and fully autonomous AI assistant infrastructure — deploy anywhere, swap anything 🦀

Fully automatic censorship removal for language models

Apple's crashwrangler with support for Apple Silicon

Ghidra decompiler plugin for LLDB

cmux: tmux for Claude Code

An autonomous agent for deep financial research

Yet another xpc sniffer

Headless IDA Pro MCP Server

Hooking Libraries for understanding how does macOS Virtualization.framework works

A Claude Code skill that scans Solidity codebases for security vulnerabilities by referencing 36 unique vulnerability types

Binary code-coverage fuzzer for macOS, based on libFuzzer and LLVM

Agent Skills used by the Sentry team for development.

X/Twitter research skill for Claude Code and OpenClaw. Agentic search, thread following, deep-dives, sourced briefings.

Prompt Injections Everywhere

Welcome to the AI Red Teaming Everything repository! This repository aims to provide techniques for red teaming AI systems, focusing on safety and bias..

Reward hacking detection probes for language models - testing bias across multiple domains with structured findings output.

A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting

Some papers and exploit writeups about WebKit.

Opinionated defaults, documentation, and workflows for Claude Code at Trail of Bits

A monitoring hub that watches popular open-source repositories and uses AI to detect when commits are patching security vulnerabilities - often before a CVE is even assigned. Findings are published…

Swizzle every method with one call

GitHub Action to alert on security patches before the CVE drops.

Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.

A cross-platform suite of tools for building and deploying software for iOS and other platforms.

chernobog is a Hex-Rays decompiler plugin that defeats Hikari LLVM obfuscation.

Anti-LLM obfuscation via finger counting

Analysis and proof-of-concept bypass of Promon SHIELD's Android application protection