rayder

Rayder A lightweight tool for orchestrating and organizing your command-line workflows About • Installation • Usage • Workflow Configuration • Parallel Execution • Workflows About Rayder is a command-line tool designed to simplify the orchestration and execution of workflows. It allows you to...

xpfarm

XPFarm An open-source vulnerability scanner that wraps well-known open-source security tools behind a single web UI. Index Section| Description ---|--- Why| Motivation and philosophy behind XPFarm Wrapped Tools| The 10 open-source tools orchestrated by XPFarm Architecture Map| Full system...

Neo

The Neo C2 Framework A modular server-client architecture post-exploitation framework built for collaborative agent management in red team operations and security testing. Enables flexibility by allowing operators to add their own extension modules Installation • Agents & Stagers • Profiles &...

studio

ShipSec Studio Open-Source Security Workflow Orchestration Platform. ShipSec is currently in active development. We are optimizing the platform for stable production use and high-performance security operations. ShipSec Studio provides a visual DSL and runtime for building, executing, and...

sandbox

Concave AI Sandbox Run AI code safely, fast, untrusted A self-hostable code execution sandbox platform built with Firecracker microVMs. Sub-200ms startup times with snapshot-based warm pooling. About Concave provides secure, isolated code execution environments for running untrusted code. Built...

supply-chain-guard

Supply Chain Guard SCG An incident-response toolkit for npm/yarn and Python pip/poetry/uv supply chain attacks — free, local, dependency-free. SCG is not a scanning engine that competes with commercial tools on coverage. It is a Claude Code skill and standalone shell toolkit that does three thing...

tengu

Tengu — Pentesting MCP Server "In Japanese mythology, the Tengu is a fierce mountain spirit — master strategist, warrior, and trainer of samurai. In cybersecurity, it guides you through every phase of the hunt." From recon to report — AI-assisted pentesting in one command. Tengu is an MCP server...

strix

Strix The open-source AI pentesting tool. Autonomous AI hackers that find and fix your app’s vulnerabilities. !TIP New! Strix integrates seamlessly with GitHub Actions and CI/CD pipelines. Automatically scan for vulnerabilit...

firecall

firecall Automate SSH communication with firewalls, switches, etc. Description These scripts are designed to automate sending commands to a Cisco ASA firewall. The intended purpose here is to eliminate the need to manually log in to a firewall to make changes. This code can be run directly via...

apache__dolphinscheduler_CVE-2023-51770_3_2_1_fixed

Apache Dolphinscheduler About Apache DolphinScheduler is the modern data orchestration platform. Agile to create high performance workflow with low-code. It is also provided powerful user interface, dedicated to solving complex task dependencies in the data pipeline and providing various types of...

Compose Aperisite

AperiSite Requirements Docker; Docker Compose; Less time to prepare environment, more time to compose. Download root@kitploit: git clone https://gitlab.com/AperiKube/compose-aperisite aperisite pushd aperisite/ git submodule update --init --recursive git submodule foreach --recursive git checkout...

security-audit-skill

security-audit A coding-agent skill that turns your agent into a security auditor. It orchestrates multiple parallel agents through a six-phase pipeline -- recon, hunting, validation, reporting, structured output, and independent verification -- to find exploitable vulnerabilities with real impac...

T3SF

T3SF Technical Tabletop Exercises Simulation Framework Table of Contents About Getting Things Ready TODO CHANGELOG Contributing About T3SF is a framework that offers a modular structure for the orchestration of events based on a master scenario events list MSEL together with a set of rules define...

security-portfolio-chris-peterson

security-portfolio-chris-peterson My portfolio showcasing vulnerability research CVE-2026-11989, CVE-2026-11395 and automated threat orchestration engineering Lucius Engine, TalonVigil...

osmedeus

Osmedeus Osmedeus - A Modern Orchestration Engine for Security What is Osmedeus? Osmedeus is a security focused declarative orchestration engine that simplifies complex workflow automation into auditable YAML definitions, complete with encrypted data handling, secure credential management, and...

red-kube

Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...

AWE

AWE：面向动态 Web 渗透测试的自适应智能体 Akshat Singh Jaswal · Ashish Baghel 被 NDSS LAST-X 2026 收录 摘要 现代 Web 应用程序日益通过 AI 辅助开发和快速无代码部署流水线构建，这进一步拉大了软件交付速度不断加快与现有安全工具适应性有限之间的差距。我们提出 AWE——一个用于自主 Web 渗透测试的记忆增强型多智能体框架，它在轻量级 LLM 编排层中嵌入了结构化、针对特定漏洞的分析流水线。在包含 104 个挑战的 XBOW 基准测试中，AWE 取得了 87% 的 XSS 成功率（较 MAPTA 提升 30.5%）和...

decker

Decker - 侵入テストオーケストレーションフレームワーク 目的 Deckerは侵入テストのオーケストレーションフレームワークです。HashiCorp Configuration Language 2（Terraformと同じ設定言語）を活用し、宣言的な侵入テスト as Codeを実現します。これにより、テストをバージョン管理、共有、再利用、そしてチームやコミュニティと共同作業できます。 decker設定ファイルの例： root@kitploit: // 変数は環境から取得されます // 例: DECKERTARGETHOST // これらは設定ファイル全体で var...

mzap

mzap mzap は、マルチターゲット ZAP スキャンのための Crystal CLI です。 ターゲットを1つ以上のZAP APIホストに分散し、オプションの待機モードをサポートし、レポートをエクスポートできます。 機能 スキャンコマンド: spider, ajaxspider, clientspider ZAP 2.16+, ascan, pscan API 定義のインポート: openapi、soap、graphql、postman ZAP 2.16+ の差分/増分スキャンのための Sites Tree export/...

rayder

Rayder コマンドラインワークフローをオーケストレーションおよび整理するための軽量ツール 概要 • インストール • 使用方法 • ワークフロー設定 • 並列実行 • ワークフロー 概要 Rayderは、ワークフローのオーケストレーションと実行を簡素化するために設計されたコマンドラインツールです。YAMLファイルで一連のモジュール（それぞれ実行するコマンドから構成される）を定義できます。Rayderは複雑なプロセスの自動化を支援し、繰り返しモジュールを合理化し、コマンドが相互に依存しない場合は並列に実行することを容易にします。 インストール...