Codex skill for authorized pwn.hust.college binary exploitation challenges.

MCPCustoms: a runtime customs and semantic firewall for Massive Intelligence (IM) agent tool calls. A zero-runtime-dependency, TypeScript-first inspection engine that vets every MCP tool call before execution: it detects parameter exploitation (path trave

Oye Scanner - real-time terminal web app security detection tool (crawl, subdomain enum, header/misconfig checks). Detection only, no exploitation.

API deploy gate. Blocks a deployment only on proven exploitation, with EPSS and CISA KEV prioritisation and published precision numbers.

Malicious package for dependency confusion exploitation

Malicious package for dependency confusion exploitation

Hojamalo Scanner - real-time terminal web app security detection tool (crawl, subdomain enum, header/misconfig checks). Detection only, no exploitation.

An all-in-one offensive security toolkit built in Rust. 250+ independent attack modules covering web exploitation, infrastructure testing, credential attacks, AI/LLM abuse, cloud/container, supply chain security, OT/ICS, IoT, network protocols, AI/LLM sec

This package facilitates the filtration of input text susceptible to server-side exploitation. It encompasses a model trained on a dataset comprising approximately 6,000 XSS-attack scripts to categorize the input into two predefined classes: vulnerable an

[](https://www.npmjs.com/package/@socialgouv/codes-naf)

SwarmHack - Autonomous swarm penetration testing for web, Active Directory, network lateral movement, and Cisco SSE — with FAIR dollar-risk quantification and Cisco SKU upsell reporting

CISA Known Exploited Vulnerabilities catalog ingestion for AbsoluteJS.

A versatile collection of hacking tools for penetration testing and cybersecurity research. Explore a wide range of utilities for network scanning, vulnerability analysis, exploitation, and more to enhance your cybersecurity toolkit.

MCP server for searching HackTricks documentation

TypeScript SDK for Tuteliq AI child safety API - Detect bullying, grooming, and unsafe content

Binary encoding of named fixed-length buffers.

Zero-config adversarial AI-agent firewall using hardware attestation, logic traps, and environment gaslighting.

a16z Smart Contract library for Solidity

YOLO offensive-security agent + /target engagement command for opencode, using Kali Linux (WSL2), Burp Suite MCP, and Playwright.

Vigil — a defensive-cyber terminal agent for Computer Network Defense. Asset discovery, vulnerability assessment, hardening, detection engineering, threat hunting, incident response — on the infrastructure you defend.