A collective list of free APIs

autonomous red teaming platform; multi-agent offensive-security meta-harness

Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitor…

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

Get up and running with Kimi-K2.6, GLM-5.1, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models.

Open-source LLM red-teaming technique toolkit (162 transforms, 36 mutators, 25 tool surfaces). MIT.

⚔️ A compiled list of companies who have active programs for responsible disclosure. MCP-enabled.

754 structured cybersecurity skills for AI agents · Mapped to 5 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND & NIST AI RMF · agentskills.io standard · Works with Claude Code, GitHub …

CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection

The open source coding agent.

Extract JavaScript source trees from Sourcemap files

GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.

Nuclei scripts created by @rxerium for zero days / actively exploited vulnerabilities.

Claude Desktop for Debian-based Linux distributions

Powerful AI Client

The fastest repo in history to surpass 50K stars ⭐, reaching the milestone in just 2 hours after publication. Better Harness Tools that make real things done. Now writing in Rust using oh-my-codex.

Agent-SDK without CLI dependencies, as an alternative to claude-agent-sdk, completely open source

Web Fuzzing Box - Web 模糊测试字典与一些Payloads

Orbis is an full spectrum automated external attack surface intelligent toolkit.

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wis…

Claude Code skill for AI-assisted bug bounty hunting — recon, IDOR, XSS, SSRF, OAuth, GraphQL, LLM injection, and report generation