Stars
AI agent for autonomous cyber operations
DeepSeek Pentest AI - Burp Suite extension
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug b…
Evals is a framework for evaluating LLMs and LLM systems, and an open-source registry of benchmarks.
AI Red Teaming playground labs to run AI Red Teaming trainings including infrastructure.
Founding is a generator that will create a loader encrypted or obfuscated with different execution types
Every practical and proposed defense against prompt injection.
AzDevRecon is a powerful web-based enumeration tool for offensive security professionals, red teamers, and pentesters targeting Azure DevOps. It leverages token-based authentication to uncover proj…
The Security Toolkit for LLM Interactions
SharpCoercer is a .NET 4.8 C# tool that leverages 16 different RPC-based coercion methods to force remote Windows hosts to authenticate to your listener over SMB or HTTP.
security assessment platform designed for enterprise environments to identify vulnerabilities, misconfigurations, and security weaknesses in Active Directory infrastructures.
Advanced In-Memory PowerShell Process Injection Framework
Scapy: the Python-based interactive packet manipulation program & library.
Extract and crack domain controller machine account password hashes via NTP MS-SNTP authentication.
Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods
Generate Frida bypass scripts for Android APK root and SSL checks.
🧠 LLMFuzzer - Fuzzing Framework for Large Language Models 🧠 LLMFuzzer is the first open-source fuzzing framework specifically designed for Large Language Models (LLMs), especially for their integra…
A visual reference of 118 essential red team tools, frameworks & standards, organized like a periodic table. Includes a printable PDF version.
PowerShell & Python tools developed for CTFs and certification exams
Test your prompts, agents, and RAGs. AI Red teaming, pentesting, and vulnerability scanning for LLMs. Compare performance of GPT, Claude, Gemini, Llama, and more. Simple declarative configs with co…
Check vulnerablity in Website pages using LLM
Everything from my OSEP study.
Bambdas collection for Burp Suite Professional and Community.
Tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound