SWE-agent

!warning Most of our current development effort is on mini-swe-agent, which has superseded SWE-agent. It matches the performance performance of SWE-agent, while being much simpler. See the FAQ for more details about the differences. Our general recommendation is to use mini-SWE-agent instead of...

Complete-google-dorks

Complete-google-sql-dorks news/news.php?id= -site:php.net -"The PHP Group" inurl:source inurl:url ext:pHp !Host=. intext:encUserPassword= ext:pcf ?action= ?cat= ?id= ?intitle:index.of? mp3 artist-name-here ?intitle:index.of? mp3 name ?page= ?pagerequested= ?pid= " -FrontPage-" ext:pwd inurl:servi...

Above

Above Network security sniffer for finding vulnerabilities in the network. Designed for pentesters and security engineers. / | / / / /| | / / \ | / / \ / |/ // / // / |/ / / // |/.//|// Above: Network Security Sniffer Developer: Mahama Bazarov Caster Contact: [email protected] Version:...

security-audit-skill

security-audit A coding-agent skill that turns your agent into a security auditor. It orchestrates multiple parallel agents through a six-phase pipeline -- recon, hunting, validation, reporting, structured output, and independent verification -- to find exploitable vulnerabilities with real impac...

redai

RedAI A terminal workbench for AI-driven vulnerability discovery and live validation. Most "AI security" tools stop at flagging code that looks vulnerable. RedAI goes further: after scanner agents produce candidate findings, validator agents work inside a live environment — a running instance of...

fuzz-wooyun-org

fuzz-wooyun-org WooYun Fuzz Library...

Callisto

Callisto An Intelligent Automated Binary Vulnerability Analysis Tool Demo: Callisto is an intelligent automated binary vulnerability analysis tool. Its purpose is to autonomously decompile a provided binary and iterate through the psuedo code output looking for potential security vulnerabilities ...

aixcc-afc-atlantis

Atlantis This repository contains Atlantis , Team Atlanta's Cyber Reasoning System CRS submitted to the AIxCC Final Competition AFC. Atlantis is designed to automatically discover and analyze vulnerabilities in software systems. The main system implementation is located in the...

Firmware_Slap

Firmware Slap Firmware slap combines concolic analysis with function clustering for vulnerability discovery and function similarity in firmware. Firmware slap is built as a series of libraries and exports most information as either pickles or JSON for integration with other tools. Slides from the...

MATE

MATE MATE is a suite of tools for interactive program analysis with a focus on hunting for bugs in C and C++ code. MATE unifies application-specific and low-level vulnerability analysis using code property graphs CPGs, enabling the discovery of highly application-specific vulnerabilities that...

SCANNER-INURLBR

Desription Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found. A PHP tool that can run on different Linux distributions helps hackers and security professionals with...

OpenAnt

OpenAnt OpenAnt from Knostic is the first open source LLM-based vulnerability discovery product now called a harness that helps defenders proactively find verified security flaws while minimizing both false positives and false negatives. Stage 1 detects. Stage 2 attacks. What survives is real. Do...

DeepAudit

DeepAudit - Your AI Security Audit Team, Making Vulnerability Discovery Accessible 简体中文 | English Screenshots Agent Audit Entry Quick access to Multi-Agent deep audit from the homepage Audit Flow Logs !Audit Flow...

Dorkify

Perform Google Dork search with Dorkify Google Dorking Google dorking is a hacker technique that uses Google Search to find security holes in the configuration and computer code that websites use. Google Dorking involves using advanced operators in the Google search engine to locate specific...

cerebro-red-v2

CEREBRO-RED v2 Research Edition Autonomous Local LLM Red Teaming Suite A research-grade framework for automated vulnerability discovery in local LLMs using Agentic Fuzzing and Adaptive Adversarial Mutation AAM. Research Goals Implement PAIR Algorithm Prompt Automatic Iterative Refinement from...

dorkscout

dorkscout dokrscout is a tool to automate the finding of vulnerable applications or secret files around the internet throught google searches, dorkscout first starts by fetching the dorks lists from https://www.exploit-db.com/google-hacking-database and then it scans a given target or everything ...

defending-code-reference-harness

Defending Code Reference Harness A reference implementation for autonomous vulnerability discovery and remediation with Claude, based on our learnings from partnering with security teams at several organizations since launching Claude Mythos Preview. For a write up of these learnings along with...

aegisgraph

AegisGraph — Engineering Platform Graph-driven automated vulnerability discovery for secure messaging applications. 577 Industries' engineering implementation for DARPA SBIR Direct-to-Phase-II topic HR0011SB20254-12 ASEMA. -blue Looking for evaluator-facing artifacts? The sanitized public...

proxychains

ProxyChains ver. 4.3.0 README ProxyChains is a UNIX program, that hooks network-related libc functions in dynamically linked programs via a preloaded DLL and redirects the connections through SOCKS4a/5 or HTTP proxies. WARNING: this program works only on dynamically linked programs. also both...

CVE-2017-7651

Info This repository is used to display the C++ code used by Felipe Balabanian on his discovery https://bugs.eclipse.org/bugs/showbug.cgi?id=529754. You can find the compiled binary in the release section. Disclaimer This is not my code and I do not take credit for any work...