AI Agent Skills

A collection of my Semgrep rules to facilitate vulnerability research.

A guide to smart contract security best practices

ASH is an extensible, open source SAST, SCA, and IaC security scanner orchestration engine.

An adversarial example library for constructing attacks, building defenses, and benchmarking both

An automated e-mail OSINT tool

Semia, security audit for AI agent skills.

Real-time phishing & scam domain blocklist — 130k+ curated threats, 888K+ community, free API, multiple formats

Ladon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32种协议(ICMP\NBT\DNS\MA…

A tool for BLE environment monitoring. Find and track Bluetooth devices around, and get notified when the target device is detected.

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

Automate the creation of a lab environment complete with security tooling and logging best practices

Linux Kodachi is a Debian-based security OS by Warith Al Maawali, built for uncompromising privacy, anonymity, and reliability. It pairs hardened defaults with a curated…

Agent-driven automated CVE discovery platform for source code auditing, vulnerability verification, and report generation.

Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).

njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.