Watchy code that offers a large feature set: OTA settings with backup and restore, NVS storage, Alarms, Timers, 10 WiFi Access Points, Compile AddOns, Weather support, Automatic TimeZone and NTP Sy…

Leveraging LLM to generate Java deserialization chains

📦 Measure the blast radius of compromised packages.

Static analysis for GitHub Actions (and more)

⌥ Coding agent with the IDE wired in. Built by Stencil Labs.

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

Skills for threat modeling, scanning, triage, patching, plus an autonomous scanning harness you can /customize

Build and query a graph database representation of source code

Trail of Bits skills for security research, vulnerability detection, and audit workflows

Gixy-Next: NGINX Configuration Security Scanner & Performance Checker

Obsidian Plugin that encrypts/decrypts the entire vault.

Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we confi…

OWASP Foundation web repository

A Pythonic framework for threat modeling

⛰️ LifeOS — The universal AI Harness designed to move you from Current to Ideal state in both life and work.

Cybersecurity AI (CAI), the framework for AI Security

A python library to create BloodHound OpenGraphs

the LLM vulnerability scanner

The Python Risk Identification Tool for generative AI (PyRIT) is an open source framework built to empower security professionals and engineers to proactively identify risks in generative AI systems.

Adversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red and Blue Teams

ChatGPT DAN, Jailbreaks prompt

List of free GPTs that doesn't require plus subscription

Autoswagger by Intruder - detect API auth weaknesses

Proof of Concepts for malicious maintainers: How to Tamper with Releases built with GitHub Actions Worfklows, presented at fwd:cloudsec Europe 2025

A comprehensive ETW (Event Tracing for Windows) event generation tool designed for testing and research purposes.

A comprehensive security checklist for MCP-based AI tools. Built by SlowMist to safeguard LLM plugin ecosystems.