nox-framework

███╗ ██╗ ██████╗ ██╗ ██╗ ████╗ ██║██╔═══██╗╚██╗██╔╝ ██╔██╗ ██║██║ ██║ ╚███╔╝ ██║╚██╗██║██║ ██║ ██╔██╗ ██║ ╚████║╚██████╔╝██╔╝ ██╗ ╚═╝ ╚═══╝ ╚═════╝ ╚═╝ ╚═╝ Cyber Threat Intelligence Framework OSINT framework for red teaming, digital forensics, and corporate exposure analysis. Introduction NOX is ...

LLM-MCP-Security-Field-Guide

🛡️ AI Security Field Guide — LLM + MCP Security The most comprehensive, up-to-date, practitioner-first security reference for LLM applications and Model Context Protocol MCP deployments. Covers real CVEs, live attack patterns, OWASP frameworks, red teaming tools, and actionable checklists — update...

OffensiveLua

Offensive Lua Offensive Lua is a comprehensive collection of offensive security and red team scripts written in Lua with FFI Foreign Function Interface. These scripts leverage the power and flexibility of LuaJIT on Microsoft Windows to perform advanced penetration testing and red teaming...

nuguard

NuGuard Open Source NuGuard is an open source AI application security toolkit. Its goal is to provide the most extensive redteaming and behavioral validation of Agentic AI applications. With NuGuard, AI developers can focus on building their applications while NuGuard continuously tests and...

AzureRedOps

AzureRedOps A Swiss Army tool for Azure / Entra ID red teaming. Author: Mr.Un1k0d3r TrueCyber Inc Version: 0.1 Language: Python 3.12+ Overview AzureRedOps is a offensive security toolkit for assessing the security posture of Microsoft Entra ID and Azure tenants. It wraps the most common red-team...

gemini-2.5-pro-nf-tables-red-teamin

gemini-2.5-pro-nf-tables-red-teamin A technical case study and timeline dataset documenting Google Gemini 2.5 Pro's safety alignment policies, guardrails, and refusal behavior evolution regarding legacy Linux kernel vulnerability primitives CVE-2023-32233. Link to case study website :...

EvilFontTool

EvilFontTool A font-based deception tool for red teaming, security research, and whatever else. EvilFontTool hides machine-readable text inside a document that displays completely different text to a human reader. It does this using Evil Fonts — fonts that intentionally deceive the viewer by...

PISmith

PIForge An Open Framework for RL-based Prompt Injection Red Teaming 💻 Code · 🤗 Models · 📜 Papers PIForge is the shared codebase for PISmith and Climbing the Hill. PISmith addresses the sparse reward problem in prompt injection red teaming, helping RL attackers explore and learn from rare successf...

Hacknetics

Hacknetics Hacknetics 🛡️ Owner: ice-wzl Contributors: ice-wzl, Jfox32199 Please consider donating: https://buymeacoffee.com/icewzl Description: Your one-stop reference for OSCP and Red Teaming! 🚀 This repository contains a curated collection of code snippets, guides, command syntax, and high-level...

apimspray

apimspray apimspray is a specialized Entra ID Passwordspraying Toolkit designed for authorized security research and Red Teaming. It utilizes Azure API Management APIM gateways as a distributed, rotating proxy layer for IP Rotating. Read Blog Post for more Details about this project Prerequisites...

FFM

Freedom Fighting Mode FFM FFM is a hacking harness that you can use during the post-exploitation phase of a red-teaming engagement. The idea of the tool was derived from a 2007 conference from @thegrugq. It was presented at SSTIC 2018 video and the accompanying slide deck is available at this url...

smbAutoRelay

DISCLAIMER : I AM NOT RESPONSIBLE OF THE MISUSE OF THIS TOOL. YOU RUN IT AT YOUR OWN RISK. Before running it, make sure you are in a controlled environment, and where you are allowed to perform this kind of exercise. PLEASE BE KIND : SMB AutoRelay SMB AutoRelay provides the automation of SMB/NTLM...

redthread

RedThread Find the exploit. Judge it. Draft the fix. Prove what changed. RedThread is a CLI-first framework for testing LLM systems, validating failures, and turning confirmed vulnerabilities into evidence-backed defense candidates. It is built for teams who need more than a one-off jailbreak dem...

cerebro-red-v2

CEREBRO-RED v2 Research Edition Autonomous Local LLM Red Teaming Suite A research-grade framework for automated vulnerability discovery in local LLMs using Agentic Fuzzing and Adaptive Adversarial Mutation AAM. Research Goals Implement PAIR Algorithm Prompt Automatic Iterative Refinement from...

redjoust

ᵔᴥᵔ RedJoust A quick and easy to use security reconnaissance webapp tool, does OSINT, analysis and red-teaming in both passive and active mode. Written in nodeJS and Electron. Join the community Join the community of Kawaiipantsu / THUGSred and participate in the dev talk around Redjoust or simpl...

DVAP

DVAP - Damn Vulnerable AI Platform Train. Break. Defend. AI Systems. An open-source platform for AI security training, red/blue teaming, CTF, benchmarking, and research. Runs 100% locally. No cloud, no paid APIs, no data leaves your machine. Prerequisites Docker 24+ and Docker Compose v2 16 GB RA...

RedRoot

🔴 RedRoot Lite – Mark X Offensive Security Framework Lite Edition | CLI-Based “Less power. Same discipline.” RedRoot Lite is the restricted edition of RedRoot , designed to provide core red teaming functionality while keeping advanced modules locked. It uses the same architecture, same CLI style,...

HuntCyberArk

HuntCyberArk - CyberArk Security Audit Suite A comprehensive PowerShell-based security assessment tool for CyberArk Privileged Access Management PAM platforms. Designed for offensive security professionals, red teamers, and penetration testers. This tool is designed to run REMOTELY against CyberA...

redeval

RedEval - LLM Safety Evaluation Framework A comprehensive framework for evaluating the safety of Large Language Models LLMs through systematic attack and refusal testing. RedEval provides a unified, secure, and extensible platform for assessing LLM robustness against adversarial prompts and harmf...

Gideon

██████╗ ██╗██████╗ ███████╗ ██████╗ ███╗ ██╗ ██╔════╝ ██║██╔══██╗██╔════╝██╔═══██╗████╗ ██║ ██║ ███╗██║██║ ██║█████╗ ██║ ██║██╔██╗ ██║ ██║ ██║██║██║ ██║██╔══╝ ██║ ██║██║╚██╗██║ ╚██████╔╝██║██████╔╝███████╗╚██████╔╝██║ ╚████║ ╚═════╝ ╚═╝╚═════╝ ╚══════╝ ╚═════╝ ╚═╝ ╚═══╝ Autonomous Cybersecurity...