Merely twelve days after the first fully automated data-encryption attack came to light, Ant Group has unveiled a free tool designed to halt dangerous artificial intelligence commands before they execute. Developed by Ant Group’s...
LnkMeMaybe A .NET 8 toolkit for creating and analysing Windows Shell Link (.lnk) files. Includes a command-line builder (LnkMeMaybe) and a graphical editor (LnkUi). Intended for security research and penetration testing. Projects Project Description...
Until recently, discovering software vulnerabilities was a highly specialized task. It often demanded months of painstaking manual labor. However, a novel framework demonstrates a paradigm shift. Standard AI coding assistants now increasingly perform this...
Strix are autonomous AI penetration testing agents that act just like real hackers – they run your code dynamically, find vulnerabilities, and validate them through actual proof-of-concepts. Built for developers and security teams who...
ALFA – Automated Audit Log Forensic Analysis for Google Workspace You can use this tool to acquire all Google Workspace audit logs and to perform automated forensic analysis on the audit logs using statistics...
BAADTokenBroker BAADTokenBroker is a post-exploitation tool designed to interact with Microsoft Entra ID device-bound keys. It can: Request the logged-on user’s PRT cookie Create a PRT cookie using supplied credentials Acquire a TGT and...
Xalgorix — The Most Powerful Open-Source AI Pentesting Agent Xalgorix is the most comprehensive open-source autonomous penetration testing platform. It combines the power of AI with 70+ security tools to deliver enterprise-grade pentesting — completely...
AI Detection Engineering Lab A template for building an AI-powered detection engineering pipeline using Claude Code as an autonomous blue team agent. Deploy a full SIEM lab, generate simulated attack telemetry, and let an AI agent...
EvilWAF is an advanced transparent MITM Firewall bypass proxy and deep WAF vulnerability scanner designed for authorized security testing. It operates at the transport layer — it does not touch payloads, cookies, or headers from...
AD CS LOLBAS Toolkit Native Windows toolkit for AD CS enumeration and exploitation. Everything runs through built-in OS components (certreq.exe, certutil.exe, PowerShell AD module, .NET Framework) – no third-party tools needed(other than RSAT). Build...
Trajan: CI/CD Security Scanner Trajan scans CI/CD pipelines for security vulnerabilities that attackers use to compromise software supply chains. It supports GitHub Actions, GitLab CI, Azure DevOps, Jenkins, and JFrog. What it does Trajan...
DLLHijackHunter is an automated Windows DLL hijacking detection tool that goes beyond static analysis. It discovers, validates, and confirms DLL hijacking opportunities using a multi-phase pipeline: Discovery — Enumerates binaries across services, scheduled tasks, startup items,...
