Global

Anthropic built Scion, a faster version control system for coding agents, and described it in Redesigning source control: a server-centric system built for hundreds of agents that read, write and land code at the same time.

A collection of various awesome lists for hackers, pentesters and security researchers

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet.

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

This repo is not maintained and is not accepting contributions.

WARNING] > This software is intended solely for experimental purposes and is not meant for any illegal activities. > We do not condone unlawful behavior and strongly encourage you to use it only within the bounds of the law.

dirsearch is being actively developed by @maurosoria and @shelld3v.

Needless to say, most websites suffer from various types of bugs which may eventually lead to vulnerabilities. Why would this happen so often? There can be many factors involved including misconfiguration, shortage of engineers' security skills, etc.

Try pgrust in your browser → | Discord | Updates | Issues

Foundry is a blazing fast, portable and modular toolkit for Ethereum application development written in Rust.

Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we configure the agent for adversarial thinking, and perform research or attack/defense operations.

scuttle is an open-source encryption layer for sensitive application logs.

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

{fmt} is an open-source formatting library providing a fast and safe alternative to C stdio and C++ iostreams.

Gobuster is a high-performance directory/file, DNS and virtual host brute-forcing tool written in Go. It's designed to be fast, reliable, and easy to use for security professionals and penetration testers.

[Fuzz testing] is a well-known technique for uncovering programming errors in software. Many of these detectable errors, like [buffer overflow], can have serious security implications.

You can download and install libevent using the vcpkg dependency manager:

The open-source, self-evolving, multi-model harness for security research.

JSON is described best here: It's like XML, but fat-free. You use it to move data around, store things, or just generally represent your program's state.

The Universal Radio Hacker (URH) is a complete suite for wireless protocol investigation with native support for many common Software Defined Radios.

A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz.

toml. Some functionality can be enabled or switched by setting environment variables. rs.

libfyaml is a high-performance YAML 1.2 and JSON parser/emitter with zero-copy operation, full document and event APIs, and the two major 1.0 features: