Collaborative application security testing between humans and agents via CLI and MCP
☆43Nov 8, 2026Updated this week
Alternatives and similar repositories for toolbox
Users that are interested in toolbox are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A simple Nim stager (w/ fiber execution)☆21Jan 31, 2022Updated 4 years ago
- Mutation-driven HTTP fuzzing for Burp Suite☆15Mar 2, 2026Updated 8 months ago
- More than just an agent harness for pentesting, yet lightweight and transparent.☆44Nov 3, 2026Updated last week
- Collection of different cybersecurity links and tools.☆23Dec 9, 2025Updated 11 months ago
- USB Modem/IAX2 War Dialer☆21Feb 2, 2026Updated 9 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Send controlled amount of bytes, send msf-pattern, calculate offset, custom buffer, badcharacters all in one.☆16Apr 20, 2024Updated 2 years ago
- Ghostwriter agent for Mythic☆16Jul 30, 2026Updated 3 months ago
- This Burp plugin allow copy all authentication headers by one click☆13Mar 23, 2026Updated 7 months ago
- 🌳 Automated triage scanner for Windows kernel driver vulnerabilities. Ghidra headless + heuristic scoring.☆17Sep 9, 2026Updated 2 months ago
- A multi coroutine concurrent batch URL survival detection tool written in Go, with concurrency determined by CPU by default.一个go编写的多协程并发批…☆12Jan 9, 2024Updated 2 years ago
- The autonomous pentester that proves its findings — AI-driven, evidence-first, behind-login.☆27Updated this week
- Built for red teamers, by red teamers - an MCP tool for malware development, OPSEC testing, and supporting custom loader design during re…☆47Aug 10, 2025Updated last year
- Local Flask app that converts bug bounty writeup URLs into Obsidian notes via the Claude CLI (Arabic Egyptian dialect).☆14May 12, 2026Updated 5 months ago
- Nemesis agent for Mythic☆28Dec 11, 2025Updated 11 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Fetch, download, and decompile Android/iOS/Exe assets from HackerOne bug bounty programs☆43Oct 12, 2026Updated 3 weeks ago
- ☆15Mar 27, 2026Updated 7 months ago
- ☆13Mar 6, 2025Updated last year
- BurpAgent插件，让你的burp能更智能发掘漏洞☆15Jan 7, 2026Updated 10 months ago
- Useful Alfred Snippets for Pentest☆18Dec 5, 2024Updated last year
- A golang library for milter support☆46Aug 16, 2024Updated 2 years ago
- Bloodhound agent for Mythic☆27Apr 19, 2025Updated last year
- A command-line tool for parsing and filtering FFUF JSON output files. Quickly search, filter, and analyze your web fuzzing results with c…☆15Jan 25, 2026Updated 9 months ago
- Visualization tool for your IO-uring workload☆22Aug 19, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- The official Rifteo agent skills library - a collection of reusable instruction sets for AI agents covering security testing, audit, and …☆38Sep 16, 2026Updated last month
- AgentTavern 是一个面向企业内协作的、可本地部署且带审批约束的 Agent 协作执行空间。☆14Apr 14, 2026Updated 6 months ago
- Security papers about software vulnerabilities and exploits☆15Jan 16, 2019Updated 7 years ago
- Rosemary: Transparent network pivoting and tunneling over QUIC. Cross-platform, no TUN/TAP, no proxychains, no proxy settings.☆15Aug 3, 2026Updated 3 months ago
- A Chromium extension that turns Linux DO into a VS Code workbench. | 像读源码一样逛 LINUX DO。☆14Aug 28, 2026Updated 2 months ago
- RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)☆18Dec 12, 2025Updated 10 months ago
- A hand-picked collection of the best bug bounty & web security writeups — libraries, publications, hunters, and Telegram feeds, all in on…☆29Sep 22, 2026Updated last month
- 🛡️ Turnkey cybersecurity lab for Hermes Agent — 397 CVE-driven skills, 152 tools, 28 frameworks (MITRE ATT&CK, MISP, CVSS, EPSS, OWASP, …☆23Aug 11, 2026Updated 3 months ago
- ☆19Sep 29, 2026Updated last month
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆16Jul 14, 2023Updated 3 years ago
- Proof-of-concept code for research into GitHub Actions Cache poisoning.☆21Mar 9, 2025Updated last year
- Next Generation AI Assisted Pen testing Reporting and Collaboration Framework☆15Updated this week
- Writing Nimless Nim - Slides and source for BSIDESKC 2024 talk.☆86Sep 17, 2026Updated last month
- Hacking with PasteJacking technique☆22Jul 2, 2024Updated 2 years ago
- 安全日志分析审计 Claude Code Skill —— Web/应用/认证/数据库四类日志解析、44 条 ATT&CK 检测规则、威胁情报三档联动、攻击链研判，输出中文研判报告 + 自包含 HTML 可视化☆15Aug 22, 2026Updated 2 months ago
- A blind SQL injection brute forcer☆113Apr 25, 2025Updated last year
Are these results useful?