Open-source, self-hosted attack surface management platform with distributed agents for asset discovery, scan orchestration, and vulnerability management.
☆43Oct 21, 2026Updated this week
Alternatives and similar repositories for lunafox
Users that are interested in lunafox are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Local tool-call review gateway for coding agents: Go + Vue, human and model review, audit trails, and usage dashboard.☆20Oct 12, 2026Updated last week
- This repository is designed to automate the detection and cleanup of in-memory web shells using MCP in combination with the memory-shell-…☆28Jan 14, 2026Updated 9 months ago
- AlterHive（幻巢）是一款面向攻防演练、红蓝对抗和安全研究场景的高交互智能欺骗蜜罐平台。平台以虚拟拓扑、会话记忆、规则引擎和多 Agent 欺骗规划为核心，将攻击者/渗透Agent引导进可控的“子网幻象”环境中，帮助防守方观察攻击意图、拖延攻击节 奏、保护真实目标。☆154Jul 15, 2026Updated 3 months ago
- An autonomous AI agent framework for authorized CTF and security labs☆137Sep 20, 2026Updated last month
- URLReplayer是一个burp插件，一个用于自动化 API 接口提取、参数解析及批量验证 的 Burp Suite 插件。旨在从 HTTP 响应中快速挖掘未公开的 API 端点并进行有效性测试。☆44Jan 15, 2026Updated 9 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Open-source attack surface management and authorized security automation platform for asset discovery, service probing, scan orchestratio…☆670Sep 21, 2026Updated last month
- Rich, interactive tables for Obsidian — with cell merges, inline editing, wikilink autocomplete, typed columns, title & footer, drag-to-r…☆30Updated this week
- 新一代反制型蜜罐平台：通过反向代理在真实业务系统中无损植入蜜饵与虚拟路由，利用功能性伪装与反向提示词注入反控 AI 渗透 Agent，实现攻击捕获、画像溯源与上线反制。☆146Updated this week
- 批量查询域名备案；app；小程序☆23May 28, 2025Updated last year
- 哥斯拉webshell管理工具二开☆402Sep 16, 2026Updated last month
- LeakDetector 是一款专为红队渗透测试人员和安全研究员设计的自动化信息泄露侦察工具。☆123Jun 9, 2026Updated 4 months ago
- mirrors.tongji.edu.cn☆11Jun 1, 2017Updated 9 years ago
- Reina 桌面 AI Agent 发行仓库（仅安装包） | Release distribution for the Reina desktop AI agent — installers only. Windows x64 & macOS arm64, in-app a…☆32Sep 10, 2026Updated last month
- nodejs爬虫，输入网站自动生成网站sitemap☆12Mar 27, 2018Updated 8 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- 一款冰蝎内存马清除工具；冰蝎内存马卸载工具 ；内存马的查杀功能有待实现。☆12Aug 20, 2023Updated 3 years ago
- NextAnti is a browser extension focused on anti-honeypot and anti anti-honeypot techniques, NextAnti 是一款专门用于浏览器反蜜罐反反蜜罐（Anti-Honeypot）的插件，…☆40Jun 22, 2026Updated 4 months ago
- M-SEC 社区的一款轻量化EDR系统（多功能检测与响应工具）☆39Jun 7, 2026Updated 4 months ago
- 基于 HeroSMS，支持 Codex 自动接码、邮箱 OTP、OAuth 登录及批量rt凭证管理。☆38Aug 18, 2026Updated 2 months ago
- WAFBypass 是一款高级Web应用防火墙（WAF）检测与绕过工具，旨在回答一个问题："目标真的有WAF防护吗？" 它能够检测目标Web应用是否受到防火墙保护，并自动尝试寻找有效的绕过方法。☆21Sep 26, 2026Updated 3 weeks ago
- Open-source Attack Surface Management. Discover assets. Identify exposure. Own your security data.☆253Updated this week
- Autonomous agent that mines Java deserialization gadget chains from any JAR directory. Static bytecode analysis + dynamic JVM probes + du…☆26Oct 8, 2026Updated 2 weeks ago
- DVLAA (Damn Vulnerable LLM and Agent Application) is a local LLM and Agent security range for OWASP LLM Top 10 and Agent security trainin…☆46Oct 7, 2026Updated 2 weeks ago
- ☆59Apr 9, 2026Updated 6 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Autonomous Penetration Testing Agent Framework with External State Memory & Anti-False-Falsification Guardrails.☆27Sep 9, 2026Updated last month
- Static config scanner that flags nginx configs vulnerable to the complex_value two-pass capture-clobbering bug (regex map + regex capture…☆31Jul 20, 2026Updated 3 months ago
- homepage for memfit AI☆89Sep 14, 2026Updated last month
- node+mongodb电影网站☆11Aug 9, 2021Updated 5 years ago
- 首个多维度，UI/UX友好的Burp suite越权漏洞检测插件☆46Oct 5, 2026Updated 2 weeks ago
- 安全日志分析审计 Claude Code Skill —— Web/应用/认证/数据库四类日志解析、44 条 ATT&CK 检测规 则、威胁情报三档联动、攻击链研判，输出中文研判报告 + 自包含 HTML 可视化☆15Aug 22, 2026Updated 2 months ago
- 自研C2 功能展示。cs+spark的结合体。省去了本地客户端，便于团队操作。后续开源社区版。☆16Oct 30, 2024Updated last year
- 主要收集CTF中的Java题目☆17Jul 25, 2026Updated 2 months ago
- JsOwl —— Go 编写的 Web 安全信息收集利器。集 JavaScript 信息收集、API 端点提取、敏感信息 扫描、攻击面梳理 于一体，同时提供 CLI 工具与 Go 库。内置 direct / browser / auto 三种采集模式，兼容 HaE 规则，支持…☆35Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Resources required for my BiliBili Pwn tutorial☆12Feb 10, 2023Updated 3 years ago
- net-audit-skills☆54Jun 1, 2026Updated 4 months ago
- ai渗透测试小程序☆125Jul 18, 2026Updated 3 months ago
- 蓝莲花XSS在线平台 (https://xss.li) 是一款完全免费开源的专业Web安全测试工具，专注于XSS（跨站脚本）漏洞检测与渗透测试。平台采用赛博朋克风格设计，提供实时监控、智能Payload管理、详细日志分析等强大功能，是安全研究人员、渗透测试工程师和CTF选手…☆30Nov 27, 2025Updated 10 months ago
- 面向 DeepSeek Harness（dsh）的渗透测试模式 @CloverSecLabs☆608Oct 9, 2026Updated last week
- 基于 ARL 深度扩展与持续优化的互联网资产自动化收集平台，面向资产发现、暴露面梳理、风险排查与持续监测等场景，提供域名识别、子域名发现、测绘引擎查询、端口与服务识别、指纹分析、URL 提取、漏洞检测、计划任务与结果汇总等能力 系统适用于乙方专业安全厂商、甲方安全运维部门开…☆120Updated this week
- ☆18Jan 1, 2026Updated 9 months ago