A collection of skills, agents, commands, and workflows for security researchers. Compatible with Claude Code, Claude Desktop, OpenCode, and other AI coding tools.
☆105Apr 19, 2026Updated 6 months ago
Alternatives and similar repositories for ai-security-arsenal
Users that are interested in ai-security-arsenal are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A Java Burp Plugin that performs text clustering on responses to identify outliers/groups based on the actual content of the server respo…☆12Sep 20, 2026Updated last month
- Improve automated and semi-automated active scanning in Burp Pro☆12Jun 13, 2025Updated last year
- MCP Attack Surface Detector - Burp plugin to make manual testing of MCP servers easier in Burp Suite☆34Oct 11, 2026Updated 2 weeks ago
- API Security Researcher☆17Updated this week
- Comprehensive, data-driven security assessment checklists across 23 platforms web, API, mobile, cloud, Active Directory, Kubernetes, LLM,…☆87Sep 16, 2026Updated last month
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A macOS utility that captures a region of your screen and mirrors it in a separate window.☆18Feb 10, 2026Updated 8 months ago
- BurpSuite Extension for performing scan via CLI.☆15Dec 5, 2017Updated 8 years ago
- An advanced data pipeline engine for the BloodHound OpenGraph framework☆19Apr 11, 2026Updated 6 months ago
- 参照xffhelper源码修改，结合了fakeip的功能，生成jar包，不再需要py支持☆13Jun 10, 2021Updated 5 years ago
- Burp Suite MCP Assistant in IDE Extension☆15Dec 31, 2025Updated 9 months ago
- Give me your APK, I will give you framework name☆15May 6, 2026Updated 5 months ago
- Utility for ClickOnce usage for Red Teams.☆15Jun 11, 2026Updated 4 months ago
- Harness fo malware analysis☆41Aug 23, 2026Updated 2 months ago
- gosqli is a fast and simple tool for detecting blind SQL injection vulnerabilities. It supports scanning URLs with custom payloads, paral…☆19Jun 22, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Android security tool that scans installed apps bytecode to discover content providers, file providers, and intent interfaces, then gener…☆21Mar 12, 2026Updated 7 months ago
- 云安全漏洞挖掘与利用 Skill。S3 桶爆破枚举、公开桶敏感文件发现、SSRF→IMDS 凭证窃取探测、K8s 未授权访问检测、容器逃逸条件识别、 AK/SK 凭证验证与权限枚举、存储桶供应链攻击利用。☆33Jul 14, 2026Updated 3 months ago
- Redteam / Pentest Skill Pack — semi-automated workflow + on-demand module selection + real-world attack chains | Kali + Claude Code 红队/渗透…☆52Aug 23, 2026Updated 2 months ago
- AI-разметка видео (главы/хайлайты/субтитры/HLS) одной командой поверх NeuralDeep Hub. Скилл для Claude Code и Codex.☆16Jul 24, 2026Updated 3 months ago
- A Rails application containing multiple vulnerabilities used for demonstration purposes☆20Mar 26, 2015Updated 11 years ago
- Exploit for CVE-2022-26134: Confluence Pre-Auth Remote Code Execution via OGNL Injection☆13Jul 24, 2022Updated 4 years ago
- 🐛 Advanced web vulnerability scanner with 5-rule false-positive reduction, WAF evasion, and modern HTML reports☆103Sep 16, 2026Updated last month
- Open-source Claude Code skills, agents, and slash commands for AI-powered penetration testing, bug bounty hunting, and security research☆592Jul 29, 2026Updated 2 months ago
- 一款集成了Nuclei模板管理、多空间引擎搜索的网络安全工具集。为安全研究人员提供高效的工作体验。☆24Oct 10, 2026Updated 2 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- DracoLure — Dragon Vector Honeypot: polyglot deception honeypot with real-time detection, threat scoring, and quarantine.☆19Jul 28, 2026Updated 2 months ago
- Tool to list smb shares and enumerate their content in a Windows domain☆14Jul 6, 2026Updated 3 months ago
- ☆35Sep 22, 2026Updated last month
- _|G.M.R|_ V1.0.0☆15Apr 24, 2025Updated last year
- A multi-agent application-security review harness for Claude Code (and, later, other AI agents). One router skill dispatches to a full of…☆41Updated this week
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆24Mar 16, 2026Updated 7 months ago
- A personal RAG system for offensive security knowledge☆178Aug 11, 2026Updated 2 months ago
- The autonomous pentester that proves its findings — AI-driven, evidence-first, behind-login.☆26Updated this week
- Maestro: Netflix’s Workflow Orchestrator☆27Jan 14, 2026Updated 9 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Cloudflare Bypass Script☆24Dec 12, 2019Updated 6 years ago
- Research code for the paper "The Trigger in the Haystack: Extracting and Reconstructing LLM Backdoor Triggers" https://arxiv.org/abs/2602…☆43Mar 26, 2026Updated 6 months ago
- Rabbit（Cairn-Y）：基于事实图、Decide/Execute 闭环和 Pi Worker 的智能任务协作系统☆72Oct 10, 2026Updated 2 weeks ago
- AI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ hooks, permissions & skills before you clone —…☆1,007Aug 10, 2026Updated 2 months ago
- GarudRecon automates domain recon with top open-source tools to discover assets, enumerate subdomains, and detect XSS, SQLi, LFI, RCE & m…☆272Mar 28, 2026Updated 6 months ago
- surface-watch monitors the authorized external attack surface of an organization over time☆55May 11, 2026Updated 5 months ago
- Cormorant Cipher is a document watermarking toolkit that embeds an invisible, machine-readable signature into typeset text. When a waterm…☆17Jun 10, 2026Updated 4 months ago