Make Office/WPS more powerful and easier to use with AI, similar to Office Copilot and WordGPT.

The open source coding agent. (Unleashed 、Removing LLM safety guardrails）

Technical notes, AD pentest methodology, list of tools, scripts and Windows commands that are useful for internal penetration tests and assumed breach exercises (red teaming).

Proof of Concepts code for Bring Your Own Vulnerable Driver techniques

🤖 A minimal and customizable Docker image running the Android emulator as a service.

Extract JavaScript source trees from Sourcemap files

List of payloads and wordlists that are specifically crafted to identify and exploit vulnerabilities in target web applications.

Original Proof-of-Concepts for React2Shell CVE-2025-55182

Writeups of OSWE-like machines

An extremely fast Python package and project manager, written in Rust.

smtp4dev - the fake smtp email server for development and testing

A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.

OSWE, OSEP, OSED, OSEE

Open-source AI hackers to find and fix your app’s vulnerabilities.

A MCP Server for APK Tool (Part of Android Reverse Engineering MCP Suites)

Cybersecurity AI (CAI), the framework for AI Security

Adversarial Machine Learning (AML) Capture the Flag (CTF)

A versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS traffic on the go.

Master Thick Client Penetration Testing: Explore practical methodologies, uncover vulnerabilities, and enhance security.

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

MCP Server for Burp

Plugin for JADX to integrate MCP server

MCP server for JADX-AI Plugin

BrutDroid - Android Studio Pentest Automator: Streamline mobile pentesting with automated emulator rooting, Frida, and Burp Suite integration.

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

A curated list of MCP servers for bug bounty.

Nuclei plugin for BurpSuite

ProjectDiscovery's Open Source Tool Manager

GUI for apktool, signapk, zipalign and baksmali utilities.