AI-powered SAST scanner that finds auth bypass, IDOR, and logic bugs Semgrep/CodeQL miss. Free GitHub Action. Supports Python, JS/TS, Go, PHP, Ruby.
☆77Jun 10, 2026Updated last month
Alternatives and similar repositories for vulnhawk
Users that are interested in vulnhawk are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Free, open-source application firewall for macOS. Little Snitch alternative with zero telemetry. Native SwiftUI world map, rules manager,…☆61Jun 8, 2026Updated last month
- Static and dynamic analysis tool for detecting malicious code, suspicious binaries, and privacy violations☆60May 14, 2026Updated 2 months ago
- Modular OSINT and attack surface analysis platform for authorized security research, with risk scoring, attack paths, and report generati…☆48Jun 4, 2026Updated last month
- CI/CD supply chain security scanner for GitHub Actions — source-to-sink injection, AI agent config poisoning, steganography, compromised …☆18Apr 23, 2026Updated 3 months ago
- Collection of Semgrep rules for security analysis☆10Mar 30, 2024Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- The samples referenced in my book, Evasive Malware (No starch Press)☆62Feb 20, 2026Updated 5 months ago
- A curated list of awesome security and hacking training platforms and resources.☆31Jul 23, 2026Updated last week
- Turn a Mac mini into a living-room retro/PS console - beautiful big-picture launcher (Electron + React)☆74Jul 18, 2026Updated 2 weeks ago
- Move files between cloud services. Free, open source, runs on your machine. No accounts, no middleman.☆17Mar 22, 2026Updated 4 months ago
- 🎯 VISTA — AI-Powered Security Testing Assistant for Burp Suite. Real-time traffic analysis, 12 expert vulnerability templates, 80+ paylo…☆18May 27, 2026Updated 2 months ago
- Autonomous AI-powered penetration testing platform. LLM-driven recon, vulnerability analysis, and exploit validation for internal & exter…☆29Apr 11, 2026Updated 3 months ago
- Mutation-driven HTTP fuzzing for Burp Suite☆15Mar 2, 2026Updated 5 months ago
- Android APK security analysis tool. Decompiles DEX, scans for vulns, parses manifests and certs. Runs in your browser.☆67May 14, 2026Updated 2 months ago
- ☆13Oct 21, 2024Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 🔍 erroreyes – Lightweight Subdomain Enumeration Tool A Python-based tool that queries crt.sh certificate logs to discover subdomains ass…☆17May 8, 2025Updated last year
- iOS traffic interception framework which route all device HTTP/HTTPS traffic through Burp Suite via a system-wide VPN tunnel☆46Feb 15, 2026Updated 5 months ago
- AWS X-Ray for Covert Command & Control☆50Oct 13, 2025Updated 9 months ago
- Game of Kingshot Contest RE☆30Apr 18, 2026Updated 3 months ago
- Live runtime audit for installed Android apps. Runs on the rooted phone, serves a browser dashboard.☆28May 23, 2026Updated 2 months ago
- List accounts with Service Principal Names (SPN) not linked to active dns records in an Active Directory Domain.☆46Dec 5, 2025Updated 7 months ago
- OpenShell is a lightweight, open-source reverse shell management server written in Go.☆24Mar 9, 2026Updated 4 months ago
- ☆72Apr 20, 2026Updated 3 months ago
- linux, kernel, rootkit, educational, cybersecurity☆31Apr 12, 2026Updated 3 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- RepShot · Generate professional security finding cards directly from Burp Suite Repeater.☆103May 31, 2026Updated 2 months ago
- AyedFuzzer is a small File-Format-Fuzzer with 3 options (File-mutating, WinDbg-interactive monitor, multi-processing) for windows executa…☆17Dec 2, 2024Updated last year
- SpicyAD is a C# Active Directory penetration testing tool designed for authorized security assessments. It combines multiple AD attack te…☆100Jun 25, 2026Updated last month
- Quick test for CVE-2023-26025 behaviours☆13Nov 29, 2023Updated 2 years ago
- Collection of Reverse, Bind & Web Shells☆16Mar 25, 2026Updated 4 months ago
- An improvement and a different approach to Mockingjay Self-Injection.☆35May 21, 2024Updated 2 years ago
- "Holy Grail PCAP" is a capture file offering exceptional coverage across nearly all tcpdump/Wireshark encapsulation types and dissectors.☆58May 3, 2026Updated 3 months ago
- Why vulnerability discovery is difficult mathematically☆28Jul 19, 2026Updated 2 weeks ago
- github but better☆18Apr 30, 2026Updated 3 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Dominate the Active Directory game. An Active Directory environments pentest tool complementary to existing ones like NetExec.☆21Jul 22, 2026Updated last week
- SpringbootGuiExploit漏洞利用工具测试版☆20Jun 7, 2024Updated 2 years ago
- mattew crawls target websites, extracts hidden attack surface, runs security analysis, fingerprints technology, and generates professiona…☆16Jul 2, 2026Updated last month
- AI reverse engineering assistant for x64dbg. Embeds a chat panel directly in the debugger with tool-use capabilities.☆55Mar 19, 2026Updated 4 months ago
- label ALL kubectl, kustomize, and helm objects, inline, without extra steps.(including namespaces and CRDs)☆15Apr 22, 2024Updated 2 years ago
- Chrome extension + MCP server — AI agents control a tab in your real browser, already logged in☆32Jun 28, 2026Updated last month
- Modules designed to be used with the Conquest framework.☆22Updated this week