Predrag Cujanović

pentagi. Fully autonomous AI Agents system capable of performing complex penetration testing tasks

awesome-agent-skills-security. 🛡️ A curated list of resources on agent skills security: attacks, defenses, frameworks, and benchmarks for securing AI agent tool use and skill ecosystems

pentest-ai. Offensive-security MCP server with 205 wrapped tools, 17 specialist agents, and 60 SPA-aware probes for OWASP Top 10. CLI + MCP, BYO LLM. No API key needed on MCP path.

HackerOne-Disclosed-Reports. A structured, auto-updating archive of disclosed HackerOne reports. Filter by severity, CWE weakness, bounty program, or year - ideal for security researchers and bug bounty hunters.

hackerone-reports. Top disclosed reports from HackerOne

skills. Pashov Audit Group Skills

Sec-88. Cyber Security Notes, Methodology, Resources and Tips

reverse-skill. Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients 逆向/渗透/安全技能路由包 - AI 自动路由 + 按需自举工具链 + 自动进化经验库 | 支持 Claude Code / Kiro / Cursor / Cline 等代码 AI 客户端

How-To-Secure-A-Linux-Server. An evolving how-to guide for securing a Linux server.

Claude-BugHunter. A Claude Code skill bundle for bug hunting and external red-team work — 71 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.

pentestagent. PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.

shannon. Shannon is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

llm-sast-scanner. A SAST skill that gives AI coding agents structured vulnerability detection across 34 vulnerability classes.

claude-bug-bounty. AI-powered bug bounty hunting from your terminal - recon, 20 vuln classes, autonomous hunting, and report generation. All inside Claude Code.

communitytools. Open-source Claude Code skills, agents, and slash commands for AI-powered penetration testing, bug bounty hunting, and security research

FlareTunnel. Proxy system that routes traffic through Cloudflare Workers for IP rotation and anonymity

recollapse. REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications

claude-code-security-review. An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.

Gemini-API-Key-Exposure-Scanner. Python

AllThingsSSRF. This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location

malicious-pdf. 💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh

JsHunter. High-Performance JavaScript Security Scanner - Process 1M URLs in ~5 hours with Telegram & Discord bot integration, Docker support, and comprehensive workflow automation

fuzzuli. fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.

hexstrike-ai. HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.

autoswagger. Autoswagger by Intruder - detect API auth weaknesses

jsmap_inspector. A local-only GUI tool to analyze `.js.map` source map files.

Prompt-Hacking-Resources. A list of curated resources for people interested in AI Red Teaming, Jailbreaking, and Prompt Injection

damn-vulnerable-MCP-server. Damn Vulnerable MCP Server

pdfrip. A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.

rustdesk. An open-source remote desktop application designed for self-hosting, as an alternative to TeamViewer.

BFScan. Tool for finding URLs, paths, secrets and generating raw HTTP requests and OpenApi specifications from config files and annotations used in JAR / WAR / APK applications.

SubSeven. SubSeven Legacy Official Source Code Repository

Cognitohunter. A powerful AWS Cognito analysis and session hijacking toolkit designed for security researchers and penetration testers. CognitoHunter specializes in dissecting AWS Cognito implementations and performing advanced credential-to-session conversions.

js-snitch. Scans remote JavaScript files with Trufflehog + Semgrep to detect leaked secrets

plution. Prototype pollution scanner using headless chrome

NucleiFuzzer. NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Redirects, leveraging advanced scanning and URL enumeration techniques

hawk-eye. A powerful scanner to scan your Filesystem, S3, MySQL, Redis, Google Cloud Storage and Firebase storage for PII and sensitive data.

convert-params. Convert Parameters

crawlee-python. Crawlee—A web scraping and browser automation library for Python to build reliable crawlers. Extract data for AI, LLMs, RAG, or GPTs. Download HTML, PDF, JPG, PNG, and other files from websites. Works with Parsel, BeautifulSoup, Playwright, and raw HTTP. Both headful and headless mode. With proxy rotation.

APTs-Adversary-Simulation. This repository contains detailed adversary simulation APT campaigns targeting various critical sectors. Each simulation includes custom tools, C2 servers, backdoors, exploitation techniques, stagers, bootloaders, and other malicious artifacts that mirror those used in real world attacks .

proposal-symbol-proto. TC39 proposal for mitigating prototype pollution

reverse-slowloris. A reverse slowloris attack to hopefully troll bots polling for vulnerable web servers

sj. A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.

HopLa. HopLa Burp Suite Extender plugin - Brings AI capabilities, autocompletion support, and a set of useful payloads to Burp Suite

Flipper. Playground (and dump) of stuff I make or modify for the Flipper Zero

kernel-hardening-checker. A tool for checking the security hardening options of the Linux kernel

Bambdas.

PhantomCrawler. PhantomCrawler is a Python-based web testing and research tool that simulates website interactions from multiple proxy IP addresses to analyze traffic behavior, access controls, and response patterns under different network conditions.

bash_tls. A minimal TLS 1.2 client implementation in a pure Bash script

airgorah. A WiFi security auditing software mainly based on aircrack-ng tools suite

dns-noise. Simple utility to add a stream of DNS queries for random domains to obfuscate traffic patterns.

XSRFProbe. The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.

API-Wordlist.

BrowserBruter. BrowserBruter is a powerful web form fuzzing automation tool designed for web security professionals and penetration testers. This Python-based tool leverages Selenium and Selenium-Wire to automate web form fuzzing, making it easier to identify potential vulnerabilities in web applications.

domloggerpp. A browser extension that allows you to monitor, intercept, and debug JavaScript sinks based on customizable configurations.

nowafpls. Burp Plugin to Bypass WAFs through the insertion of Junk Data

GAP-Burp-Extension. Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist

Pearcleaner. A free, source-available and fair-code licensed mac app cleaner

graphqlMaker. Finds graphql queries in javascript files

server-side-prototype-pollution. A collection of Server-Side Prototype Pollution gadgets and exploits

awesome-secure-defaults. Awesome secure by default libraries to help you eliminate bug classes!

git-rotate. Leveraging GitHub Actions to rotate IP addresses during password spraying attacks to bypass IP-Based blocking

pphack. Advanced Client-Side Prototype Pollution Scanner

MHDDoS. Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods

psmaps. Report memory usage of Linux processes

http-garden. Differential testing framework for HTTP implementations

PolarDNS. PolarDNS is a specialized authoritative DNS server suitable for penetration testing and vulnerability research.

py-strace2pcap. convert specific strace output file to pcap using scapy

metatrapd. A canary service for cloud metadata end-points

dummy. Generator of static files(csv, jpeg, png, pdf) for testing file upload. It can generate csv and png files of any number of bytes!

smugglefuzz. A rapid HTTP downgrade smuggling scanner written in Go.

CLZero. A project for fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors

awesome-pentest. A collection of awesome penetration testing resources, tools and other shiny things

Bluetooth-LE-Spam. Kotlin

clairvoyance. Obtain GraphQL API schema even if the introspection is disabled

headerpwn. A fuzzer for finding anomalies and analyzing how servers respond to different HTTP headers

kernel-exploit-factory. Linux kernel CVE exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment anymore.

sessionprobe. SessionProbe is a multi-threaded tool designed for penetration testing and bug bounty hunting. It evaluates user privileges in web applications by taking a session token and checking access across a list of URLs, highlighting potential authorization issues.

graphql-wordlist. The only GraphQL wordlist you'll ever need. Operations, field names, type names... Collected on more than 60k distinct GraphQL schemas.

inql. InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

CloudFlair. 🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

cloudflare-origin-ip. Try to find the origin IP of a webapp protected by Cloudflare.

awesome-honeypots. an awesome list of honeypot resources

Task-Ninja. Ultimate Tasks Automation Framework for Hackers, DevSecOps, Pentesters, and Bug-bounty hunters!

glutton. Generic Low Interaction Honeypot

WP-RestScan. Scan Wordpress Servers for Access Control Issues

linux-network-performance-parameters. Learn where some of the network sysctl variables fit into the Linux/Kernel network flow. Translations: 🇷🇺

DockerDetectionNotes. Some of my rough notes for Docker threat detection

ReconAIzer. A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomains and more!

route-detect. Find authentication (authn) and authorization (authz) security bugs in web application routes.

API-Fuzzer. Python

Vulnerabilities-Unmasked. This repo tries to explain complex security vulnerabilities in simple terms that even a five-year-old can understand!

Burp-IISTildeEnumerationScanner. Burp extension to check and exploit the IIS Tilde Enumeration/IIS 8.3 Short Filename Disclosure vulnerability

wafaray. Enhance your malware detection with WAF + YARA (WAFARAY)

wsrepl. WebSocket REPL for pentesters

bas-celik. A program for reading smart-card documents issued by the government of Serbia

deepsecrets. Secrets scanner that understands code

Witcher. Witcher is the first framework for using AFL to fuzz web applications.

Afuzz. Afuzz is an automated web path fuzzing tool for the Bug Bounty projects.

awesome-sec-challenges. A curated list of Awesome Security Challenges.

CVE-2023-25157. CVE-2023-25157 - GeoServer SQL Injection - PoC

mac-monitor. "The missing ProcMon for macOS": Mac Monitor records Endpoint Security events and displays them for analysis.

waf-bypass. Check your WAF before an attacker does

fast-mail-bomber. Fast, multithreading, efficient and easy-to-use mail bombing/spamming tool. Sending mails via mailman services hosted by different providers.

dnstwist. Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

emba. EMBA - The firmware security analyzer

osint-balkan. Public sites and information related to Balkan countries that can be used for OSINT purposes.

KeyDecoder. KeyDecoder app lets you use your smartphone or tablet to decode your mechanical keys in seconds.

Web-Attack-Cheat-Sheet. Web Attack Cheat Sheet

FlipperAmiibo. Made to be used with Flipper just drag the folder into NFC

Xtreme-Firmware. The Dom amongst the Flipper Zero Firmware. Give your Flipper the power and freedom it is really craving. Let it show you its true form. Dont delay, switch to the one and only true Master today!

Flipper_Zero. My SD Drive for Flipper Zero

safeurl. A Server Side Request Forgery (SSRF) protection library. Made with 🖤 by Doyensec LLC.

wafme0w. Fast and lightweight Web Application Firewall Fingerprinting tool

yi-hack-v5. Even newer Custom Firmware for Xiaomi Cameras based on Hi3518ev200 Chipset. It includes free RTSP, ONVIF and other improvements based on the work by roleoroleo

oauth2c. User-friendly OAuth2 CLI

subzuf. a smart DNS response-guided subdomain fuzzer

oidc-ssrf. An Evil OIDC Server

ungoogled-chromium-macos. macOS packaging for ungoogled-chromium

DefaultCreds-cheat-sheet. One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

bypass-url-parser. bypass-url-parser

GoBypassAV. 整理了基于Go的16种API免杀测试、8种加密测试、反沙盒测试、编译混淆、加壳、资源修改等免杀技术，并搜集汇总了一些资料和工具。

DirtyCred. Kernel exploitation technique

API-SecurityEmpire. API Security Project aims to present unique attack & defense methods in API Security field

ApacheTomcatScanner. A python script to scan for Apache Tomcat server vulnerabilities.

svg-cheatsheet. A cheatsheet for exploiting server-side SVG processors.

Publii. The most intuitive Static Site CMS designed for SEO-optimized and privacy-focused websites.

awesome-flipperzero. 🐬 A collection of awesome resources for the Flipper Zero device.

CrackQL. CrackQL is a GraphQL password brute-force and fuzzing utility.

GraphCrawler. GraphQL automated security testing toolkit

exploiting-smart-contract-vulnerabilities. Repository for "Exploiting smart contract vulnerabilities" bachelor thesis at School of Electrical Engineering, University of Belgrade. Paper (in Serbian) with 5 examples of vulnerable smart contracts and exploitation of them.

brutas. Wordlists handcrafted (and automated) with ♥

ved. Vault Exploit Defense

dockerfile. Dockerfile best-practices for writing production-worthy Docker images.

CRLFsuite. The most powerful CRLF injection (HTTP Response Splitting) scanner.

slipit. Utility for creating ZipSlip archives

Awesome-RCE-techniques. Awesome list of step by step techniques to achieve Remote Code Execution on various apps!

graphql-threat-matrix. GraphQL threat framework used by security professionals to research security gaps in GraphQL implementations

CVE-2022-23222. CVE-2022-23222: Linux Kernel eBPF Local Privilege Escalation

tornado. Anonymously Reverse Shell over Tor Network using Hidden services without Portforwarding.

t-reqs. Grammar-based HTTP/1 fuzzer with mutation ability

linux-hardened. Minimal supplement to upstream Kernel Self Protection Project changes. Features already provided by SELinux + Yama and archs other than multiarch arm64 / x86_64 aren't in scope. Only tags have stable history. Shared IRC channel with KSPP: irc.libera.chat #linux-hardening

resume.github.com. Resumes generated using the GitHub informations

CVE-2021-43008-AdminerRead. Exploit tool for CVE-2021-43008 Adminer 1.0 up to 4.6.2 Arbitrary File Read vulnerability

Bash-Oneliner. A collection of handy Bash One-Liners and terminal tricks for data processing and Linux system maintenance.

gau. Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

stunner. Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers.

pwn_jenkins. Notes about attacking Jenkins servers

cf-bypass. Shell

HTTP-Smuggling-Calculator. Perform TE.CL HTTP Request Smuggling attacks by crafting HTTP Request automatically.

param-miner-doc. Unofficial documentation for the great tool Param Miner

wpgarlic. A proof-of-concept WordPress plugin fuzzer

Imperva_gzip_WAF_Bypass. Python

open-source-web-scanners. A list of open source web security scanners

redirex. tool that generates bypasses for open redirects

jfrog-spring-tools. Python

graphql-cop. Security Auditor Utility for GraphQL APIs

coraza. OWASP Coraza WAF is a golang modsecurity compatible web application firewall library

SingleFile. Web Extension for saving a faithful copy of a complete web page in a single HTML file

container-security-checklist. Checklist for container security - devsecops practices

curl-impersonate. curl-impersonate: A special build of curl that can impersonate Chrome & Firefox

cve. Gather and update all available and newest CVEs with their PoC.

pure-bash-bible. 📖 A collection of pure bash alternatives to external processes.

wifi_pass. Collection of passwords from torrents/dumps/others - uniq, sorted, removed length bellow 8 for wifi cracking

CVE-2021-3156. Sudo Baron Samedit Exploit

sizesmuggler. Python

TProxer. A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.

OAUTHScan. Burp Suite Extension useful to verify OAUTHv2 and OpenID security

InsecureShop. An Intentionally designed Vulnerable Android Application built in Kotlin.

log4j. Trickest Workflow for discovering log4j vulnerabilities and gathering the newest community payloads.

Advanced-SQL-Injection-Cheatsheet. A cheat sheet that contains advanced queries for SQL Injection of all types.

ipsourcebypass. This Python script can be used to bypass IP source restrictions using HTTP headers.

openssh-backdoor. Experimental and sneaky backdoor patch for OpenSSH Portable.

rip_raw. Rip Raw is a small tool to analyse the memory of compromised Linux systems.

tfsec. Tfsec is now part of Trivy

poc-cve-2021-4034. PoC for CVE-2021-4034 dubbed pwnkit

restler-fuzzer. RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.

sliver. Adversary Emulation Framework

cve-2021-3449. CVE-2021-3449 OpenSSL denial-of-service exploit 👨🏻‍💻

OneListForAll. Rockyou for web fuzzing

SourceCodeReview. Source Code Review resources for Bug Bounty Hunters & Developers. This Repo is updated consistently.

rotating-tor-http-proxy. A multi-arch image provides one HTTP proxy endpoint with many concurrent tunnels to the Tor network.

SpringBootVulExploit. SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

relevant-wordlist. A wordlist that is kept up to date with the latest headlines to provide relevant words to human society

vortex. VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit

awesome-list-of-secrets-in-environment-variables. 🦄🔒 Awesome list of secrets in environment variables 🖥️

portmaster. 🏔 Love Freedom - ❌ Block Mass Surveillance

alternative-frontends. 🔐🌐 Privacy-respecting web frontends for popular services

Atlas. Quick SQLMap Tamper Suggester

webapp-wordlists. This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version contains a wordlist of all the files directories for this version.

chronorace. Python

awesome-privacy. Awesome Privacy - A curated list of services and alternatives that respect your privacy because PRIVACY MATTERS.

My-CTF-Web-Challenges. Collection of CTF Web challenges I made

burp-log4shell. Log4Shell scanner for Burp Suite

android-foss. A list of Free and Open Source Software (FOSS) for Android – saving Freedom and Privacy.

log4jcheck. A script that checks for vulnerable Log4j (CVE-2021-44228) systems using injection of the payload in common HTTP headers.

JNDI-Injection-Exploit. JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

Log4jAttackSurface.

STEWS. A Security Tool for Enumerating WebSockets

cats. CATS is a REST API Fuzzer and negative testing tool for OpenAPI endpoints. CATS automatically generates, runs and reports tests with minimum configuration and no coding effort. Tests are self-healing and do not require maintenance.