1978 matches found
SWE-agent
!warning Most of our current development effort is on mini-swe-agent, which has superseded SWE-agent. It matches the performance performance of SWE-agent, while being much simpler. See the FAQ for more details about the differences. Our general recommendation is to use mini-SWE-agent instead of...
CakeFuzzer
CakeFuzzer Latest release : 1.0 License : GNU GPL v3.0 Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives. Currently it is implemented to support the Cake...
DorkNet
DorkNet Selenium powered Python script to automate searching the web for vulnerable applications. DorkNet can take a single dork or a list of dorks as arguments. After the proper command line arguments have been passed, the script will use Selenium and Geckodriver to find the results we want and...
Dorkify
Perform Google Dork search with Dorkify Google Dorking Google dorking is a hacker technique that uses Google Search to find security holes in the configuration and computer code that websites use. Google Dorking involves using advanced operators in the Google search engine to locate specific...
Above
Above Network security sniffer for finding vulnerabilities in the network. Designed for pentesters and security engineers. root@kitploit: / | / / / /| | / / \ | / / \ / |/ // / // / |/ / / // |/.//|// Above: Network Security Sniffer Developer: Mahama Bazarov Caster Contact:...
cerebro-red-v2
CEREBRO-RED v2（研究版） 自主本地 LLM 红队测试套件 一个用于使用 Agentic Fuzzing 和自适应对抗变异（AAM）自动化发现本地 LLM 漏洞的研究级框架。 研究目标 实现 PAIR 算法 （提示自动迭代精炼），参考 arxiv.org/abs/2310.08419 LLM作为评委 的语义评估，附带思维链推理 遥测优先 架构，用于白皮书级分析 多提供商 LLM 支持（Ollama、Azure OpenAI、OpenAI） 架构 技术栈 后端 ：FastAPI（async/await）、Pydantic（严格类型）、Uvicorn LLM 网关...
dorkscout
dorkscout dokrscout is a tool to automate the finding of vulnerable applications or secret files around the internet throught google searches, dorkscout first starts by fetching the dorks lists from https://www.exploit-db.com/google-hacking-database and then it scans a given target or everything ...
security-audit-skill
security-audit A coding-agent skill that turns your agent into a security auditor. It orchestrates multiple parallel agents through a six-phase pipeline -- recon, hunting, validation, reporting, structured output, and independent verification -- to find exploitable vulnerabilities with real impac...
aixcc-afc-atlantis
Atlantis Este repositorio contiene Atlantis , el Sistema de Razonamiento Cibernético CRS del equipo Atlanta, presentado en la Competencia Final de AIxCC AFC. Atlantis está diseñado para descubrir y analizar automáticamente vulnerabilidades en sistemas de software. La implementación principal del...
Callisto
Callisto An Intelligent Automated Binary Vulnerability Analysis Tool Demo: Callisto is an intelligent automated binary vulnerability analysis tool. Its purpose is to autonomously decompile a provided binary and iterate through the psuedo code output looking for potential security vulnerabilities ...
MATE
MATE MATE is a suite of tools for interactive program analysis with a focus on hunting for bugs in C and C++ code. MATE unifies application-specific and low-level vulnerability analysis using code property graphs CPGs, enabling the discovery of highly application-specific vulnerabilities that...
Complete-google-dorks
Complete-google-sql-dorks news/news.php?id= -site:php.net -"The PHP Group" inurl:source inurl:url ext:pHp !Host=. intext:encUserPassword= ext:pcf ?action= ?cat= ?id= ?intitle:index.of? mp3 artist-name-here ?intitle:index.of? mp3 name ?page= ?pagerequested= ?pid= " -FrontPage-" ext:pwd inurl:servi...
defending-code-reference-harness
防御代码参考框架 一个基于我们与多个组织的安全团队合作的经验，使用 Claude 进行自主漏洞发现与修复的参考实现。关于这些经验及最佳实践的详细说明，请参阅随附博客文章（也可在 blog-post.md 中找到）。如需仅使用 SDK 的轻量级相同 recon → find → triage → report → patch 循环指南，请参阅配套食谱。 本仓库不被维护且不接受贡献。 🔒 需要托管方案？ Anthropic 提供 Claude Security，一个托管产品， 可在多个项目中查找并修复源代码中的漏洞。Claude Security 扫描您的仓库以发现漏洞，...
SCANNER-INURLBR
Desription Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found. A PHP tool that can run on different Linux distributions helps hackers and security professionals with...
redai
RedAI 一个用于AI驱动漏洞发现及实时验证 的终端工作台。 大多数“AI安全”工具停在标记 看起来 有漏洞的代码上。RedAI更进一步：在扫描代理生成候选发现后，验证代理在实时环境内工作 ——即目标正在运行的实例，加上它们与之交互所需的任何工具——并尝试在报告中出现之前证实或驳斥每个发现。它们点击UI、访问端点、编写PoC脚本、托管辅助服务器，并保存证据。 环境是一个插件。RedAI附带两个——一个真实的Chrome浏览器和一个iOS模拟器——您可以通过实现一个小接口来编写自己的环境（例如Linux虚拟机、Android模拟器、Kubernetes集群、嵌入式设备模拟器）。...
OpenAnt
OpenAnt OpenAnt de Knostic es un producto de código abierto basado en LLM para el descubrimiento de vulnerabilidades que ayuda a los defensores a encontrar de forma proactiva fallos de seguridad verificados, minimizando a la vez los falsos positivos y los falsos negativos. La etapa 1 detecta. La...
openclaw
OpenClaw 🦞 — Your assistant, on your devices, in your chats OpenClaw is an open-source AI assistant that runs on your own computer and meets you in the channels you already use: Discord, iMessage, Slack, Teams, Telegram, WhatsApp, and 20+ more, plus native apps for macOS, iOS, Android, Windows, a...
Firmware_Slap
Firmware Slap Firmware slap combines concolic analysis with function clustering for vulnerability discovery and function similarity in firmware. Firmware slap is built as a series of libraries and exports most information as either pickles or JSON for integration with other tools. Slides from the...
CVE-2017-7651
Información Este repositorio se utiliza para mostrar el código C++ utilizado por Felipe Balabanian en su descubrimiento https://bugs.eclipse.org/bugs/showbug.cgi?id=529754. Puedes encontrar el binario compilado en la sección de lanzamientos. Descargo de responsabilidad Este no es mi código y no m...