Agent Reinforcement Trainer: train multi-step agents for real-world tasks using GRPO. Give your agents on-the-job training. Reinforcement learning for Qwen2.5, Qwen3, Llama, and more!

Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.

An extremely fast Python package and project manager, written in Rust.

iOS and macOS Decompiler

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

FULL Augment Code, Claude Code, Cluely, CodeBuddy, Comet, Cursor, Devin AI, Junie, Kiro, Leap.new, Lovable, Manus Agent Tools, NotionAI, Orchids.app, Perplexity, Poke, Qoder, Replit, Same.dev, Trae…

Reproduce DeFi hacked incidents using Foundry.

A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

Dex to Java decompiler

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

Differential testing framework for HTTP implementations

🙌 OpenHands: Code Less, Make More

Find secrets with Gitleaks 🔑

Find, verify, and analyze leaked credentials

Burp Plugin to Bypass WAFs through the insertion of Junk Data

Rockyou for web fuzzing

A browser extension that allows you to monitor, intercept, and debug JavaScript sinks based on customizable configurations.

A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.

Reverse proxies cheatsheet

Scope aggregation tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

Rust-based high performance domain permutation generator.

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

侦查守卫(ObserverWard)的指纹库

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

Generates permutations, alterations and mutations of subdomains and then resolves them

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Tool to check for dependency confusion vulnerabilities in multiple package management systems