Security AI helper for Caido: pipes your local Claude Code / Gemini / Codex / Copilot CLI through 18 MCP tools for manual web security testing. Local-first, no API keys.
☆38Aug 21, 2026Updated this week
Alternatives and similar repositories for drift
Users that are interested in drift are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Caido plugin to send HTTP requests to external CLI security tools with preview, batch execution, and live output☆24Updated this week
- Stealth hybrid URL mapper☆31May 1, 2026Updated 3 months ago
- Windows C/C++ development environment on Linux☆18Mar 29, 2026Updated 4 months ago
- Modular OSINT and attack surface analysis platform for authorized security research, with risk scoring, attack paths, and report generati…☆85Jun 4, 2026Updated 2 months ago
- Mutation-driven HTTP fuzzing for Burp Suite☆15Mar 2, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆22Mar 16, 2026Updated 5 months ago
- Fast Go-based XSS assessment toolkit☆20Mar 18, 2026Updated 5 months ago
- PhishCollector is a research framework for collecting, analysing, and tracking phishing sites.☆23Mar 1, 2026Updated 5 months ago
- MCPwned is a companion extension that enables pentesters to effectively test MCP servers. It recognizes MCP-like endpoints, provies a sca…☆20Jul 3, 2026Updated last month
- Echos is a stealthy C2 traffic emulator built in Rust for Red Teamers. It simulates adversarial beaconing patterns and custom jitter to t…☆34Jul 28, 2026Updated 3 weeks ago
- Claude Skill to create Caido plugins☆23Dec 1, 2025Updated 8 months ago
- Browser extension blocking scam and phishing pages https://chromewebstore.google.com/detail/nehboro/ljgklnaofelbcnegjniagpmjknkmaiom☆16Apr 22, 2026Updated 4 months ago
- Professional AWS pentest tool: IAM privilege escalation, S3 exploits, compute enumeration, detailed audit reports☆33May 2, 2026Updated 3 months ago
- A curated collection of tools, techniques, frameworks, and learning resources focused on Attack Surface Management (ASM).☆39Jan 13, 2026Updated 7 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- this is everything☆44Apr 7, 2026Updated 4 months ago
- A Caido plugin to monitor, intercept, and debug JavaScript sinks based on customizable configurations.☆47Apr 8, 2026Updated 4 months ago
- A fast, keyboard-driven HTTP intercepting proxy and hacking & pentesting toolkit for the terminal.☆81Updated this week
- Agent-native code security review with MCP, structured findings, and practical pre-merge scanning workflows.☆22Apr 2, 2026Updated 4 months ago
- mattew crawls target websites, extracts hidden attack surface, runs security analysis, fingerprints technology, and generates professiona…☆16Jul 2, 2026Updated last month
- Nuclei scripts created by @rxerium for zero days / actively exploited vulnerabilities.☆194Jul 20, 2026Updated last month
- ThreatCheck - Select any indicator of compromise on any web page - or highlight an entire paragraph from a threat report - and instantly …☆33May 6, 2026Updated 3 months ago
- Burp extension to generate multi-step CSRF POC.☆31Sep 23, 2019Updated 6 years ago
- MCP server for .NET reverse engineering workflows (dnSpy/ILSpy ecosystem), built in C#.☆42Mar 25, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- SharpDir is a simple code set to search both local and remote file systems for files and is compatible with Cobalt Strike.☆29Jul 4, 2019Updated 7 years ago
- Salesforce identity and permission graph collector for BloodHound CE. Maps users, profiles, permission sets, roles, groups, sharing rules…☆48Jul 30, 2026Updated 3 weeks ago
- ☆79May 8, 2026Updated 3 months ago
- Ransoblin (Ransomware Bokoblin)☆18Oct 4, 2020Updated 5 years ago
- C# code to run PIC using CreateThread☆17Apr 19, 2019Updated 7 years ago
- Tailscale/Headscale C2 profile and agent for Mythic☆34Mar 14, 2026Updated 5 months ago
- AWS SSO Device-Code Phishing Toolkit for Red / Purple Teams☆23Mar 10, 2026Updated 5 months ago
- Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.☆17Jul 11, 2025Updated last year
- SharpSvc is a simple code set to interact with the SC Manager API and is compatible with Cobalt Strike.☆26Aug 8, 2023Updated 3 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- A Burp Suite extension that brings full DOM rendering capabilities directly into Burp, enabling effective security testing of modern Java…☆15May 11, 2026Updated 3 months ago
- Passive JavaScript reconnaissance for penetration testers — bridging Burp Suite traffic into structured, AST-based analysis in VSCode.☆36Feb 5, 2026Updated 6 months ago
- Tool to assist bug bounty hunters☆77Mar 23, 2026Updated 5 months ago
- Kibana app for RedELK☆17Mar 19, 2023Updated 3 years ago
- 哪吒网络安全是一款高性能终端 UI (TUI) 应用，专为从事红队演练、渗透测试和漏洞研究的网络安全专业人员打造。本应用作为智能指挥控制界面，利用 DeepSeek 大语言模型提供实时流式对话、基于函数调用 (Function Calling) 的自动化工具编排，以及多智能…☆21Aug 11, 2026Updated last week
- Miscellaneous C-Sharp projects for red team activities☆22Aug 12, 2022Updated 4 years ago
- ☆50Feb 27, 2026Updated 5 months ago