PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.

JWT Auditor – Analyze, break, and understand your tokens like a pro.

Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your Kubernetes YAML and Charts. Static code analysis for Ku…

syzkaller is an unsupervised coverage-guided kernel fuzzer

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

Provides a chat-based, LLM-assisted reverse engineering experience within Ghidra

cloc counts blank lines, comment lines, and physical lines of source code in many programming languages.

Detects process injection and memory manipulation used by malware. Finds RWX regions, shellcode patterns, API hooks, thread hijacking, and process hollowing. Built in Rust for speed. Includes CLI a…

Bora Jogar?

LLM powered fuzzing via OSS-Fuzz.

Tfsec is now part of Trivy

An advanced AI-driven vulnerability scanner and penetration testing tool that integrates multiple AI providers (OpenAI, Grok, OLLAMA, Claude) with comprehensive security testing modules for automat…

As a bug hunter, are your bug bounty reports getting rejected because you don't use a "malicious" Proof of Concept (PoC) app to exploit the vulnerabilities? I've got you covered!

Scan MCP Servers for vulnerabilities

OWASP Foundation web repository

badUSB ek0ms style with integrated c2

PowerShell toolkit that extracts locked Windows files (SAM, SYSTEM, NTDS, ...) using MFT parsing and raw disk reads

Collection of codes focused on Linux rootkits

Evasion for Cobalt Strike

This tool helps inject code into the processes of Antivirus programs.

An auto-updating list of shodan dorks with info on the amount of results they return!

CyberSecurity BLUE TEAM containerized platform that brings together open-source tools for SIEM, DFIR, CTI, SOAR, and Network Analysis

AI Captcha Bypass

AI-powered workflow automation and AI Agents platform for AppSec, Fuzzing & Offensive Security. Automate vulnerability discovery with intelligent fuzzing, AI-driven analysis, and a marketplace of s…