Recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested. MIT. Full write-up at hiago.sh
☆1,329Nov 7, 2026Updated this week
Alternatives and similar repositories for recon-skills
Users that are interested in recon-skills are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- all round pentest skill☆460Sep 16, 2026Updated last month
- How To approach recon on real targets — from passive enumeration to origin IP discovery. Covers tools, automation, and the logic behind e…☆438Jul 5, 2026Updated 4 months ago
- Open-source AI-powered offensive security harness for automated penetration testing.☆3,424Updated this week
- AI-powered bug bounty hunting toolkit that works with or without subscription.☆5,653Oct 28, 2026Updated last week
- Karpathy LLM based claude harness for PenetrationTesting / Bugbounty using obsidian☆340Sep 1, 2026Updated 2 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curat…☆5,479Updated this week
- Agentic offensive-security in your terminal☆1,446Aug 31, 2026Updated 2 months ago
- A web security workbench built for AI agents.☆388Updated this week
- A complete bug bounty workspace for HackerOne researchers. Includes scope enforcement, automated recon/vuln pipeline (400+ tools), report…☆491Oct 14, 2026Updated 3 weeks ago
- Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can repla…☆1,809Updated this week
- Reusable prompts for a structured, evidence-first bug bounty hunting workflow☆917Oct 3, 2026Updated last month
- Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists wi…☆3,146Updated this week
- claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md f…☆10,466Oct 12, 2026Updated 3 weeks ago
- A blazingly fast, multi-threaded TUI malware analysis tool built in Rust. Features deep PE parsing, YARA scanning, and heuristic risk sco…☆216Oct 29, 2026Updated last week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engage…☆2,424Oct 6, 2026Updated last month
- 66-tool MCP server for dark web intelligence — breach data, ransomware tracking, Tor .onion access, malware analysis, blockchain intel, e…☆524Sep 22, 2026Updated last month
- autonomous red teaming platform; multi-agent offensive-security meta-harness☆6,972Sep 8, 2026Updated last month
- A curated collection of offensive, defensive and AI/LLM security tools.☆185Oct 29, 2026Updated last week
- Find zero-days while you sleep. DeepZero is an automated vulnerability research framework that parses, decompiles, and analyzes thousands…☆770Updated this week
- Sec-Gemini is a cutting-edge AI model designed to enhance cybersecurity capabilities and empower defenders in the ongoing battle against…☆660Sep 17, 2026Updated last month
- 8 Claude skills · 100+ recon capabilities · 80 secret-regex patterns · 80+ dorks · 9 read-only credential validators · 27 attack-path tem…☆2,986Oct 20, 2026Updated 2 weeks ago
- Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.☆2,420Updated this week
- Pentest Copilot is an AI-powered browser based ethical hacking assistant tool designed to streamline pentesting workflows.☆1,552Aug 14, 2026Updated 2 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.☆3,248Updated this week
- Autonomous AI pentesting daemon — 34 security tools, 15 vuln classes, WAF bypass engine, LLM analysis. Free tier models (<$3/mo). HackerO…☆84Aug 7, 2026Updated 3 months ago
- Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more☆1,570Oct 21, 2026Updated 2 weeks ago
- Python Exploitation Framework, V8 Engine Debugger, Proxy interceptor, marketplace, post-exploitation, backdoor generator,....☆632Updated this week
- Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path anal…☆461Updated this week
- Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision☆1,144Oct 25, 2026Updated last week
- ⚔️ Community maintained directory, MCP and API of 3,000+ active bug bounty programs and VDPs☆474Updated this week
- List of AI Hacking Agents☆748Updated this week
- GitHub-native command-and-control framework for authorized security research, with encrypted multi-channel transport and resilient failov…☆234Jul 18, 2026Updated 3 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&C…☆1,760Oct 1, 2026Updated last month
- A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free…☆5,189Sep 16, 2026Updated last month
- Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.☆1,307Updated this week
- Pentest Harness — Heaven for Hackers. A self-hosted AI agent harness for authorized pentests, bug bounty, security labs, and CTFs. Bring …☆462Oct 7, 2026Updated last month
- AIRecon is an autonomous cybersecurity agent that combines a self-hosted Large Language Model (Ollama) with a Kali Linux Docker sandbox a…☆1,087Oct 27, 2026Updated last week
- A comprehensive guide to adversarial testing and security evaluation of AI systems, helping organizations identify vulnerabilities before…☆1,038Oct 28, 2026Updated last week
- Integrate LLM models directly into Ghidra for AI-enhanced reverse engineering.☆840Jul 22, 2026Updated 3 months ago