interplains/zero-breach-toolkitFree, open-source check for traces of mercenary spyware (Pegasus, Predator, Graphite, Candiru and more) on computers, Android phones and iPhone…
chainreactors/gogoHigh-performance Go scanning engine for red teams: configurable port scanning, active/passive fingerprinting, info extraction, and nuclei-compatible…
piratesshield/arise-xtiAI-driven external attack surface management pipeline: 28 modules for recon, subdomain/DNS enumeration, web/API/cloud vulnerability scanning, OSINT…
movray/melesMalware scanner for container images: daemonless, layer-aware, ClamAV and YARA
cybersecurity91/redforgeBrowser-side red team toolkit with 102 offline tools for recon, payload generation, credential attacks, crypto, encoding and engagement reporting.
javascript-obfuscator/javascript-obfuscatorObfuscates JavaScript and Node.js code with variable renaming, string encryption, control flow flattening, and anti-debugging to protect source code…
bakhishovism/vyrulixOpen-source, bare-metal desktop malware triage and static threat intelligence workbench for Windows (MapViewOfFile PE parsing, Capstone disassembly,…
gathin23/cleanyourtvDebloat any Android or Google TV over Wi-Fi and get an Apple TV-style home.
projectdiscovery/nuclei-templatesCommunity curated list of templates for the nuclei engine to find security vulnerabilities.
darkflippers/unleashed-firmwareCustom firmware for Flipper Zero enabling Sub-GHz radio, NFC/RFID emulation, infrared, and BadUSB attack features for hardware security testing.
krixx1337/reagentliveLet AI agents explore a running game from the inside. Live, safe, instant.
baarai/artexLLM multi-agent autonomous penetration testing platform with planner/worker agents, asset and exploration graphs, MITM traffic recording, and…
Evidence Nov 12, 2026
Evidence Nov 12, 2026
ikow/php2shell-pocCVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
storytold/craft-anythingPure-Rust reverse-engineering engine with 314 CLI/MCP inspection tools (disassembly, decompilation, strings, call graphs) that studies any app, site…
baarai/artexLLM multi-agent autonomous penetration testing platform with planner/worker agents, asset and exploration graphs, MITM traffic recording, and…
lucksi/darkusSearches dark web and onion search engines for keywords and returns matching onion links, with optional local database storage and Ahmia blacklist…
benampel/hackersignal7.45M-document cyber threat intelligence corpus and benchmark linking hacker-forum, exploit and advisory text to 340K NVD CVEs, with temporal splits…
ikow/php2shell-pocCVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
storytold/craft-anythingPure-Rust reverse-engineering engine with 314 CLI/MCP inspection tools (disassembly, decompilation, strings, call graphs) that studies any app, site…
baarai/artexLLM multi-agent autonomous penetration testing platform with planner/worker agents, asset and exploration graphs, MITM traffic recording, and…
lucksi/darkusSearches dark web and onion search engines for keywords and returns matching onion links, with optional local database storage and Ahmia blacklist…
benampel/hackersignal7.45M-document cyber threat intelligence corpus and benchmark linking hacker-forum, exploit and advisory text to 340K NVD CVEs, with temporal splits…
