Karib0u

SindriKit. A foundational C library for building operationally credible offensive capabilities

Hollow. A shellcode loader generator with support for multiple injection techniques, built for red team engagements.

lacuna-rs. Ported from [LACUNA Chain](https://github.com/MazX0p/LACUNA-Chain) by Mohamed Alzhrani (0xmaz). lacuna-rs is a reusable Rust crate that provides the same primitives as the original C TTP, structured so it can be dropped into any Rust project —

TABPE. A monthly Windows PE baseline dataset for Cyber security researchers

nimcrypt. Nim-based encryption tool for obfuscating shellcode and payloads for evading Windows Defender.

gdid-reversal.

massgrave.dev. Documentation For Microsoft Activation Scripts (MAS)

CodexBar. Show usage stats for OpenAI Codex and Claude Code, without having to login.

actionlint. :octocat: Static checker for GitHub Actions workflow files

Cardputer-CSI-Human-Detector. C++

cargo-deny. ❌ Cargo plugin for linting your dependencies 🦀

tau. a minimalist agent that teaches you to create coding agents

GRFICSv3. GRFICSv3 is a FREE and open source OT security lab with realistic networking and a 3D process simulation for training and learning ICS security

design.md. A format specification for describing a visual identity to coding agents. DESIGN.md gives agents a persistent, structured understanding of a design system.

StackSentry. Windows memory scanner for call stack spoofing detection, unbacked shellcode, injected DLLs and in-memory C2 implants.

uwd. Call Stack Spoofing for Rust

LACUNA-Chain. Six-layer call-stack spoofing via .pdata lacunae — defeats ETW-Ti, kernel callbacks, CET shadow stack, and return-address validation in a single composite chain.

clamui. ClamAV Desktop application ( GUI )

reverse-skill. Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients 逆向/渗透/安全技能路由包 - AI 自动路由 + 按需自举工具链 + 自动进化经验库 | 支持 Claude Code / Kiro / Cursor / Cline 等代码 AI 客户端

restic. Fast, secure, efficient backup program

documenso. The Open Source DocuSign Alternative.

agent-browser. Browser automation CLI for AI agents

turso. Turso is an in-process SQL database, compatible with SQLite.

OGameX. Open-source OGame redesign clone, powered by the latest PHP Laravel framework

flue. The sandbox agent framework.

Pake. 🤱🏻 Turn any webpage into a desktop app with one command.

palmier-pro. macOS video editor built for AI

auto-re-agent. Autonomous reverse-engineering agent: source-aware reverser/checker loop, objective verifier, 11-signal parity engine, Ghidra backend

pm-skills. PM Skills Marketplace: 100+ agentic skills, commands, and plugins — from discovery to strategy, execution, launch, and growth.

container. A tool for creating and running Linux containers using lightweight virtual machines on a Mac. It is written in Swift, and optimized for Apple silicon.

RuView. π RuView turns commodity WiFi signals into real-time spatial intelligence, vital sign monitoring, and presence detection — all without a single pixel of video.

ESP32-Bit-Pirate. A Hardware Hacking Tool with Web-Based CLI That Speaks Every Protocol

last30days-skill. AI agent skill that researches any topic across Reddit, X, YouTube, HN, Polymarket, and the web - then synthesizes a grounded summary

agent-skills. Production-grade engineering skills for AI coding agents.

Roseau. Habbo Hotel emulator for the 2001 "v1" client revision.

hermes-agent. The agent that grows with you

defending-code-reference-harness. Skills for threat modeling, scanning, triage, patching, plus an autonomous scanning harness you can /customize

rustinel-rules. Official, curated detection content (Sigma, YARA, IOC packs) for the Rustinel endpoint detection engine.

pi_agent_rust. High-performance AI coding agent CLI written in Rust with zero unsafe code

rustnet. Per-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.

Handy. A free, open source, and extensible speech-to-text application that works completely offline.

thor-ai-benchmarks. LLM benchmark results for THOR forensic finding triage quality

awesome-security-hardening. A collection of awesome security hardening guides, tools and other resources

nextest. A next-generation test runner for Rust.

rsigma. A complete Sigma detection engineering toolkit: parser, linter, evaluator, correlation engine, conversion framework, streaming daemon, MCP and LSP servers :crab:

hermes-webui. Hermes WebUI: The best way to use Hermes Agent from the web or from your phone!

badusb. Flipper Zero badusb payload library

awesome-flipperzero-withModules. A collection of awesome resources & modules for the Flipper Zero device. Best used with Rogue Master Flipper Zero Custom Firmware.

Flipper-Zero-BadUSB. Repository for my flipper zero badUSB payloads. Now almost entirely plug and play.

unleashed-firmware. Flipper Zero Unleashed Firmware

awesome-flipperzero. 🐬 A collection of awesome resources for the Flipper Zero device.

ProtoPirate. Flipper Zero Protocol Pirate

flipperzero-rs. Rust on the Flipper Zero

cersei. The Rust SDK for building coding agents. Tool execution, LLM streaming, graph memory, sub-agent orchestration, MCP — as composable library functions.

OpenSpec. Spec-driven development (SDD) for AI coding assistants.

hyperion-disassembler. Native multi-arch disassembler & decompiler - PE/ELF/Mach-O, x86/x64/ARM64, Lua scripting, RTTI recovery

audit. An 8-stage vulnerability-discovery agent.

dust. A more intuitive version of du in rust

ghostty. 👻 Ghostty is a fast, feature-rich, and cross-platform terminal emulator that uses platform-native UI and GPU acceleration.

headless_re_tools_for_llms. Python

floci. Light, fluffy, and always free - The AWS Local Emulator alternative

pi-extensions. Extensions for the pi coding agent

deepclaude. Use Claude Code's autonomous agent loop with DeepSeek V4 Pro, OpenRouter, or any Anthropic-compatible backend. Same UX, 17x cheaper.

pyre. Ghidra decompiler in your browser

supacode. worktree coding agents command center.

ironcurtain. A secure* runtime for autonomous AI agents. Policy from plain-English constitutions. (*https://ironcurtain.dev)

marketingskills. Marketing skills for Claude Code and AI agents. CRO, copywriting, SEO, analytics, and growth engineering.

go-trafilatura. go-trafilatura is a Go port of the trafilatura Python library.

rs-trafilatura. Fast, accurate web content extraction in Rust. ML page-type classification, per-type extraction, confidence scoring. F1=0.966 on ScrapingHub (#1), F1=0.859 across 2,008 annotated pages (1,497 development + 511 held-out test

deepsec. Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents

PageIndex. 📑 PageIndex: Document Index for Vectorless, Reasoning-based RAG

cmux. Open source Ghostty-based macOS terminal with vertical tabs and notifications for AI coding agents. Built for multitasking, organization, and programmability.

qmd. mini cli search engine for your docs, knowledge bases, meeting notes, whatever. Tracking current sota approaches while being all local

artemis. A cross platform forensic parser written in Rust!

pi-mcp-adapter. Token-efficient MCP adapter for Pi coding agent

pi-skills. Skills for pi coding agent (compatible with Claude Code and Codex CLI)

obscura. The headless browser for AI agents and web scraping

rbinmcp. Rogue Binary Model Context Protocol (MCP): a Docker-packaged binary analysis lab for AI agents. It supports reverse engineering, malware triage, and artifact comparison with compact tool responses that start cheap and move into heavier evidence on demand.

little-coder. A harness optimized to smaller LLMs

x64dbg-automate. ZMQ and Messagepack Powered Remote Automation Plugin for x64dbg

pi. AI agent toolkit: unified LLM API, agent loop, TUI, coding agent CLI

CubeSandbox. Instant, Concurrent, Secure & Lightweight Sandbox for AI Agents.

open-vibe-island. The open-source alternative to vibe-island, designed for heavy code agent users, supporting cc/codex/opencode, terminal/ghostty/cmux/kaku/iterm. 开源的vibe-island替代品，为重度code agent用户设计，支持cc/codex/opencode, terminal/ghostty/cmux/kaku/iterm

jTrans. Official code of jTrans: Jump-Aware Transformer for Binary Code Similarity Detection

raptor. Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we configure the agent for adversarial thinking, and perform research or attack/defense operations.

andrej-karpathy-skills. A single CLAUDE.md file to improve Claude Code behavior, derived from Andrej Karpathy's observations on LLM coding pitfalls.

opendataloader-pdf. PDF Parser for AI-ready data. Automate PDF accessibility. Open-source.

career-ops. Open-source AI job search: scan job portals, score listings A-F, tailor your CV, track applications — runs locally in your AI coding CLI (Claude Code, Gemini, Codex, OpenCode…)

cti-expert. CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code. 67+ commands, 35 techniques, no API keys required.

openscreen. Create stunning demos for free. Open-source, no subscriptions, no watermarks, and free for commercial use. An alternative to Screen Studio.

windbg-mcp. An MCP (Model Context Protocol) server that turns all pybag Windows debugger functions into native MCP tools. It lets MCP-compatible clients (Claude Desktop, Claude Code, Cowork, OpenAI Codex CLI, Cursor, and custom agents) control user-mode processes, kernel sessions, and crash dump analysis via structured JSON calls.

flare-learning-hub. Free educational content on reverse engineering and malware analysis from the FLARE team

espup. Tool for installing and maintaining Espressif Rust ecosystem.

awesome-esp-rust. Curated list of resources for ESP32 development in the Rust programming language

datagouv-mcp. Official data.gouv.fr Model Context Protocol (MCP) server that allows AI chatbots to search, explore, and analyze datasets from the French national Open Data platform, directly through conversation.

vibe-security-radar. Python

vigil. Vigil - an ever improving 100% OpenSource AI system for security

notify-cyber. A cybersecurity news aggregator that curates the latest cybersecurity news from various sources all on one platform and got +17K visitors during its operation

betterleaks. Scan the world (for secrets)

Anthropic-Cybersecurity-Skills. 817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0

Marketing-for-Founders. Practical marketing resources to get the first 10 / 100 / 1000 users for your SaaS / App / Startup

kong. The world's first agentic reverse engineer.

gstack. Use Garry Tan's exact Claude Code setup: 23 opinionated tools that serve as CEO, Designer, Eng Manager, Release Manager, Doc Engineer, and QA

omlx. LLM inference server with continuous batching & SSD caching for Apple Silicon — managed from the macOS menu bar

TauRPC. Typesafe IPC layer for Tauri applications

pino. 🌲 super fast, all natural json logger

IronPE. IronPE is a Windows PE manual loader written in Rust for both x86 and x64 PE files.

autoresearch. AI agents running research on single-GPU nanochat training automatically

dirplayer-rs. A web-compatible Shockwave Player emulator written in Rust

vulhunt. Vulnerability detection framework by Binarly's REsearch team

vibe-re. A collection of vibe reverse engineered binaries and malware (for educational purposes only)

intelligence. Malware, tooling, logs, IOCs and intelligence

llmfit. Hundreds of models & providers. One command to find what runs on your hardware.

TTPRunner. Run TTPs, with AI!

pentagi. Fully autonomous AI Agents system capable of performing complex penetration testing tasks

zeroclaw. Fast, small, and fully autonomous AI personal assistant infrastructure, any OS, any platform — deploy anywhere, swap anything 🦀

doggo. :dog: Command-line DNS Client for Humans. Written in Golang

caddy. Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

configextractor-py. Python Library for ConfigExtractor

openclaw. Your own personal AI assistant. Any OS. Any Platform. The lobster way. 🦞

fiber. ⚡️ Express inspired web framework written in Go

ida-domain. IDA Domain API - Python interface for IDA Pro reverse engineering platform

ty. An extremely fast Python type checker and language server, written in Rust.

sops. Simple and flexible tool for managing secrets

orval. orval is able to generate client with appropriate type-signatures (TypeScript) from any valid OpenAPI v3 or Swagger v2 specification, either in yaml or json formats. 🍺

BinaryAudit. An open-source benchmark for evaluating AI agents' ability to find backdoors hidden in compiled binaries.

seaweedfs. SeaweedFS is a distributed storage system for object storage (S3), file systems, and Iceberg tables, designed to handle billions of files with O(1) disk access and effortless horizontal scaling.

rustfs. 🚀2.3x faster than MinIO for 4KB object payloads. RustFS is an open-source, S3-compatible high-performance object storage system supporting migration and coexistence with other S3-compatible platforms such as MinIO and Ceph.

wud. Keep your containers up-to-date!

detection-engineering-skill. Meta-skill that orchestrates VirusTotal, yarGen, and YARA expertise into automated detection engineering pipelines

claude-code-teams-mcp. use claude code's agent teams orchestraction with any harness

shannon. Shannon is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

Security-Detections-MCP. MCP to help Defenders Detection Engineer Harder and Smarter

zgrab2. Fast Application Layer Scanner

ecs. Python

ghidra-mcp. Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker deployment.

goblin. An impish, cross-platform binary parsing crate, written in Rust

rustinel. Open-source cross-platform endpoint detection engine for Windows, macOS, and Linux using ETW, ESF, eBPF, Sigma, YARA, IOCs, and ECS NDJSON alerts.

ThreatIntelligenceConsumer. Demonstrates consuming from a SecurityTrace ETW session by consuming from the Threat-Intelligence ETW provider without a driver or PPL privilege

msg-extractor. Extracts emails and attachments saved in Microsoft Outlook's .msg files

taskiq. Distributed task queue with full async support

karton-playground. Python

granian. A Rust HTTP server for Python applications

Robyn. Robyn is a Super Fast Async Python Web Framework with a Rust runtime.

openresponses-python. Python SDK for OpenResponses Spec

openresponses. TypeScript

Damn_Vulnerable_Kernel_Module. Damn Vulenerable Kernel Module for kernel fuzzing

Damn_Vulnerable_C_Program. An example C program which contains vulnerable code for common types of vulnerabilities. It can be used to show fuzzing concepts.

zensical. A modern static site generator by the Material for MkDocs team

happy. Mobile and Web client for Codex and Claude Code, with realtime voice, encryption and fully featured

2Pack. Rust Based PE & Shellcode Packer

AV-EDR-Killer. AV/EDR processes termination by exploiting a vulnerable driver (BYOVD)

Rustic64. 64-bit, position-independent implant template for Windows in Rust.

rustatio. Modern BitTorrent Ratio Faker

yarGen-dbs. Databases used in yarGen

yarGen-Go. A YARA rule generator

santa. A binary and file access authorization system for macOS.

santamon. Lightweight macOS detection agent built on Santa’s Endpoint Security telemetry.

BMAD-METHOD. Breakthrough Method for Agile Ai Driven Development

claude-plugins-official. Official, Anthropic-managed directory of high quality Claude Code Plugins.

Stirrup. The lightweight framework for building agents

MemProcFS-DockerTimeline. PowerShell

iced. Blazing fast and correct x86/x64 disassembler, assembler, decoder, encoder for Rust, .NET, Java, Python, Lua

awesome-dfir-skills. A curated collection of DFIR skills and workflows for InfoSec practitioners.

die-in-browser. Static binary analysis with Detect It Easy — 100% in your browser, no uploads.

vibe-kanban. Get 10X more out of Claude Code, Codex or any coding agent

the-art-of-pivoting. The Art of Pivoting - Techniques for Intelligence Analysts to Discover New Relationships in a Complex World

The-CTI-Research-Guide. A repository to help CTI teams tackle the challenges around collection and research by providing guidance from experienced practitioners

phnt. Native API header files for the System Informer project.

arangodb. 🥑 ArangoDB is a native multi-model database with flexible data models for documents, graphs, and key-values. Build high performance applications using a convenient SQL-like query language or JavaScript extensions.

angr. A powerful and user-friendly binary analysis platform!

lazygit. simple terminal UI for git commands

Incident-Response-Powershell. PowerShell Digital Forensics & Incident Response Scripts.

IoCs. Sophos-originated indicators-of-compromise from published reports

msdocsviewer. msdocsviewer is a simple tool that parses Microsoft's win32 API and driver documentation to be used within IDA.

agentic-threat-hunting-framework. ATHF is a framework for agentic threat hunting - building systems that can remember, learn, and act with increasing autonomy.

hey-api. 👨‍🚀 Turn API specifications into production-ready SDKs, validators, mocks, and more. 20+ plugins. Millions of weekly npm downloads. Used by Vercel, OpenCode, PayPal, AWS, Autodesk, and many more.

vhs. Your CLI home video recorder 📼

Ransomware-Tool-Matrix. A resource containing all the tools each ransomware gangs uses

EventLog-Baseline-Guide. Windows Event Log Audit Configuration Baselines and Guidelines. Automated monitoring of audit policy settings across different security frameworks.

lm-council. LLMs sitting on a council together to decide, by consensus, who among them is the best.

spec-kit. 💫 Toolkit to help you get started with Spec-Driven Development

LifeOS. An General Purpose AI Harness for magnifying human capabilities. [CODING, BUILDING, CREATING, BUSINESS, LIFE, WORK, ...]

agentic-context-engine. 🧠 Make your agents learn from experience. Now available as a hosted solution at kayba.ai

winbindex. An index of Windows binaries, including download links for executables such as exe, dll and sys files

anyrun-sdk. Simplify integration with ANY.RUN REST API services

YAMAGoya. Yet Another Memory Analyzer for malware detection and Guarding Operations with YARA and SIGMA

trivy. Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

SysWhispers3. SysWhispers on Steroids - AV/EDR evasion via direct system calls.

opencti_mcp_server. Natural language interface to OpenCTI threat intelligence. Built with Claude Code for $22. Part of Cooper Cyber Coffee.

pyghidra-mcp. Python Command-Line Ghidra MCP

apk-info. APK full-featured parser

Flare-On-Challenges. This repository aims to compile all Flare-On challenge binaries and write-ups. Update: 2014 -2024.

jetson-inference. Hello AI World guide to deploying deep-learning inference networks and deep vision primitives with TensorRT and NVIDIA Jetson.

jetson-containers. Machine Learning Containers for NVIDIA Jetson and JetPack-L4T

jetson-image. 💾 Create minimalist, Ubuntu based images for the Nvidia jetson boards

autoit-extractor. AutoIt Extractor transferred to GitHub

textual. The lean application framework for Python. Build sophisticated user interfaces with a simple Python API. Run your apps in the terminal and a web browser.

sigmazero. Evaluate Sigma rules in Pure Rust !

kernagent. Headless AI agent for deterministic reverse engineering.