The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Enriching the NVD CVSS scores to include Temporal & Threat Metrics

The Python Risk Identification Tool for generative AI (PyRIT) is an open access automation framework to empower security professionals and machine learning engineers to proactively find risks in th…

A natural language interface for computers

fabric is an open-source framework for augmenting humans using AI. It provides a modular framework for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.

An Gen AI-powered tool that guides security practitioners in prompting GenAI models to assist in application security activities.

"Bob the Smuggler": A tool that leverages HTML Smuggling Attack and allows you to create HTML files with embedded 7z/zip archives. The tool would compress your binary (EXE/DLL) into 7z/zip file for…

This repository contains notes and resources related to ethical hacking. Here, you'll find a wealth of information on various aspects of hacking, including information gathering, scanning and enume…

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Projects for security students

🐶 A curated list of Web Security materials and resources.

This repository contains cutting-edge open-source security notes and tools that will help you during your Red Team assessments.

💻🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.

List of Awesome Red Teaming Resources

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

Tools and Techniques for Red Team / Penetration Testing

Adversarial Threat Landscape for AI Systems

articles

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

App that lets you style your own Android! This uses Fragments to create a flexible and responsive UI.

A collection of various awesome lists for hackers, pentesters and security researchers