Intel · itspricedin.lol

🕵️ Intel feed — 5660 resources from the ai-security compendium

Categories: Agent Frameworks · Agent Identity · Agent Security · Anti-Crawling · Architecture · Benchmarks · Code Analysis · Coding Tools · Detection and Monitoring · Engineering Patterns · Frameworks and Standards · General Reading · Governance and Policy · Guardrails and Firewalls · Honeypots and Deception · Incidents · Jailbreaking · MCP (Model Context Protocol) · Model Attacks · Papers · Privacy · Prompt Injection · Red Teaming · Safety and Alignment · Sandboxing and Isolation · Secrets Management · Secure Coding · Supply Chain · Threat Modeling

Showing 500 of 500. Source: github.com/AnthonyHerman/ai-security-corpus · browse it in Internet Explorer. This is the research; the markets are the bets.

Snapshot 2026-10-10 · last checked 2026-10-13 14:25 UTC · NEW = added in the last 14 days (nothing fresh this fortnight; the bugs are resting)

Title	Category	Section
G0DM0D3 - Pliny's open-source multi-model liberated chat interface for red teaming	Jailbreaking	Resources
Agentic AI Red Teaming Playbook	Agent Security	Agent Security Frameworks and Tools
Automatic Red Teaming LLM Agents with MCP Tools	MCP (Model Context Protocol)	Research
Hiding in AI Traffic: Abusing MCP for Red Teaming	MCP (Model Context Protocol)	Research
Automated Red Teaming with GOAT: the Generative Offensive Agent Tester	Papers	Offensive Security and Red Teaming
Ask What Your Country Can Do For You: Towards a Public Red Teaming Model	Papers	Offensive Security and Red Teaming
Red Teaming AI Red Teaming	Papers	Offensive Security and Red Teaming
Red Teaming Large Reasoning Models	Papers	Offensive Security and Red Teaming
OWASP GenAI Red Teaming Guide	Red Teaming	Guides and Methodologies
Pillar Security - AI Red Teaming Introduction	Red Teaming	Guides and Methodologies
AI/LLM Red Team Handbook	Red Teaming	Guides and Methodologies
AI Pentest Scoping	Red Teaming	Guides and Methodologies
How Google Does It: Building an Effective AI Red Team	Red Teaming	Guides and Methodologies
3 takeaways from red teaming 100 generative AI products	Red Teaming	Guides and Methodologies
A First Look at Python in Excel for Red Team Operations	Red Teaming	Guides and Methodologies
Active Directory - Domain Persistence	Red Teaming	Guides and Methodologies
AI Red Teaming Guide - comprehensive guide to adversarial testing of AI systems	Red Teaming	Guides and Methodologies
API Security Testing Using AI in Postman - Dana Epp	Red Teaming	Guides and Methodologies
Auditing JDBC Drivers at Scale with Hacktron CLI	Red Teaming	Guides and Methodologies
Automating Bug Bounty with n8n	Red Teaming	Guides and Methodologies
Automating the Operator - Integrating LLMs into Offensive Security Workflows	Red Teaming	Guides and Methodologies
Bug Bounty Automation with Python: The Secrets of Bug Hunting	Red Teaming	Guides and Methodologies
Building a hypothesis-driven bug bounty automation system with Claude Code Agent Teams	Red Teaming	Guides and Methodologies
Building a Red Team Infrastructure in 2023	Red Teaming	Guides and Methodologies
Bypassing Detections with Command-Line Obfuscation - introducing ArgFuscator	Red Teaming	Guides and Methodologies
Chrome Debugging Protocol - Modern Tradecraft	Red Teaming	Guides and Methodologies
Code4rena on how to get started as a smart contract auditor	Red Teaming	Guides and Methodologies
Critical Thinking Podcast on running Claude for hours of autonomous bug bounty hacking	Red Teaming	Guides and Methodologies
Critical Thinking podcast: tips for running AI agents for hacking - log failures, never delete files	Red Teaming	Guides and Methodologies
Cyber Red Teaming - organisational, technical and legal implications in a military context	Red Teaming	Guides and Methodologies
DEF CON 34: Taming the Swarm - lessons from building a deterministic agentic web pentesting system	Red Teaming	Guides and Methodologies
Digging for Secrets on Corporate Shares	Red Teaming	Guides and Methodologies
Dissecting redis CVE-2023-28425 with chatGPT as assistant	Red Teaming	Guides and Methodologies
Finding Zero-Days with Any Model - Niels Provos	Red Teaming	Guides and Methodologies
From Patch to Exploit - using Claude Code to reverse engineer a zero-day in PaperCut NG	Red Teaming	Guides and Methodologies
Hacking Google with A.I. for $500,000	Red Teaming	Guides and Methodologies
How I Used AI to Create a Working Exploit for CVE-2025-32433 Before Public PoCs Existed	Red Teaming	Guides and Methodologies
How to build an offensive AI security agent	Red Teaming	Guides and Methodologies
How to Google Dork a Specific Website for Hacking	Red Teaming	Guides and Methodologies
Josh Terrill on a Windows patch-diffing and exploit research workflow using LLM analysis	Red Teaming	Guides and Methodologies
Living off the land	Red Teaming	Guides and Methodologies
Methodology - offensive security testing methodologies for pentesters and red teamers	Red Teaming	Guides and Methodologies
Microsoft 365 Enumeration	Red Teaming	Guides and Methodologies
Nagli's thread on subdomain recon methodology for bug bounty targeting deepseek.com	Red Teaming	Guides and Methodologies
Navigating AI, Fighting Skynet - Using AI for adversarial engineering	Red Teaming	Guides and Methodologies
Phishing Like a Pro: Adding SPF, DMARC, DKIM and MX records to Evilginx	Red Teaming	Guides and Methodologies
Pivoting from Microsoft Cloud to On-Premise Machines	Red Teaming	Guides and Methodologies
Red Team Maturity Model - a model for building and improving your internal Red Team	Red Teaming	Guides and Methodologies
Red Teaming with ServiceNow	Red Teaming	Guides and Methodologies
Running an Adversary Emulation Exercise - Culbert Report	Red Teaming	Guides and Methodologies
ScriptBlock Smuggling	Red Teaming	Guides and Methodologies
SunSec's generic CDC-style vulnerability research prompt, inspired by a $500K RCE found for $25	Red Teaming	Guides and Methodologies
The Bug Bounty Playbook - TTPs, methodology and tradecraft for bug bounty hunting	Red Teaming	Guides and Methodologies
The Bug Bounty Singularity: Our Hackbot - Joseph Thacker	Red Teaming	Guides and Methodologies
The Bug Hunter's Methodology v4 - Recon	Red Teaming	Guides and Methodologies
The Mythos We Have At Home - A Patch-Diffing Pipeline for N-Day Generation	Red Teaming	Guides and Methodologies
Tunnel via Cloudflare to any TCP Service	Red Teaming	Guides and Methodologies
Tur.js on bypassing Cloudflare mTLS protection in a banking app with Frida	Red Teaming	Guides and Methodologies
P4RS3LT0NGV3	Red Teaming	Tools
Opcode.sh	Red Teaming	Tools
claude-bug-bounty: AI-powered bug bounty hunting toolkit	Red Teaming	Tools
Introducing Neo, an AI security engineer for complex security tasks	Red Teaming	Tools
Partnering with Caido to Bring Precision & Control to Agentic Pentesting	Red Teaming	Tools
pwn.ai - Autonomous AI Penetration Testing	Red Teaming	Tools
Giving an Agent a Rooted Android Phone	Red Teaming	Tools
abliteration.ai - uncensored LLMs and Policy Gateway for AI red teaming and pentest workflows	Red Teaming	Tools
ActiveMQ-RCE - Apache ActiveMQ RCE exploit tool	Red Teaming	Tools
adauth - Active Directory authentication library for pentest tooling	Red Teaming	Tools
AddUser-SAMR - create local admins via the SAMR API	Red Teaming	Tools
ADOKit - Azure DevOps Services Attack Toolkit	Red Teaming	Tools
ADPathFinder - OpenGraph Attack Path Mapping in BloodHound CE	Red Teaming	Tools
adscan - Active Directory pentesting tool for Linux	Red Teaming	Tools
afrog - security tool for bug bounty, pentest and red teaming	Red Teaming	Tools
agentic_security - Agentic LLM vulnerability scanner and AI red teaming kit	Red Teaming	Tools
AI HTTP Analyzer - Burp Suite extension using AI to find vulnerabilities in HTTP traffic	Red Teaming	Tools
ai-classifier - AI safety evaluation framework testing LLM apps against adversarial prompt datasets	Red Teaming	Tools
ai_tabletop_world_builder - AI-powered cybersecurity war-gaming and tabletop exercise platform	Red Teaming	Tools
aimap - Bishop Fox internet-scale discovery and security testing of exposed AI services	Red Teaming	Tools
AirSnitcher - Wi-Fi client isolation testing toolkit for Kali	Red Teaming	Tools
amber - read and write Burp Suite Proxy HTTP history byte for byte	Red Teaming	Tools
ANIMO - Azure and Entra ID red team C2 platform	Red Teaming	Tools
Announcing AI-driven Caido	Red Teaming	Tools
APIDetector - scan for exposed Swagger API endpoints	Red Teaming	Tools
apkX - advanced APK and iOS security analysis tool	Red Teaming	Tools
ArgusRed - AI security scan and pen test CLI	Red Teaming	Tools
Arsenal - pentest command inventory and launcher	Red Teaming	Tools
arsenal-ng - Go-based pentest command launcher with cheat-sheets	Red Teaming	Tools
AtlasReaper - recon and write ops on Confluence and Jira	Red Teaming	Tools
AutoAR - automated bug bounty recon and attack-surface platform	Red Teaming	Tools
AutoPentestX - automated penetration testing and vulnerability reporting toolkit	Red Teaming	Tools
AutoRMM - EDR-on-EDR Violence red team toolkit	Red Teaming	Tools
AWS Security Agent on-demand penetration testing is now generally available	Red Teaming	Tools
AWS Security Agent on-demand penetration testing now generally available	Red Teaming	Tools
AZexec - Azure and Entra ID offensive execution tool	Red Teaming	Tools
azure-storage-reverse-shell - reverse shell via Azure Storage blobs	Red Teaming	Tools
BadTakeover-BOF - Beacon Object File for BadSuccessor dMSA account takeover	Red Teaming	Tools
BadZure - deploy intentionally misconfigured Entra ID tenants with attack paths	Red Teaming	Tools
baobab - Tree-based conversation UI for LLM APIs	Red Teaming	Tools
bebiks releases SSRF Utility tool for bug hunters to discover and exploit SSRF vulns	Red Teaming	Tools
BitUnlocker - BitLocker downgrade attack for CVE-2025-48804	Red Teaming	Tools
Bluetooth LE Spam - Android app for phantom BLE device advertisements	Red Teaming	Tools
BOFHound AD CS Integration - SpecterOps	Red Teaming	Tools
brainstorm - LLM-powered web fuzzing tool combining local models with ffuf	Red Teaming	Tools
Brainstorm Tool Release: Optimizing Web Fuzzing With Local LLMs	Red Teaming	Tools
BruteForceAI - AI-powered login brute-force tool	Red Teaming	Tools
BucketHoarder - search and download files from open cloud buckets via GrayHat Warfare	Red Teaming	Tools
bugSkills - convert HackerOne bug reports into reusable AI skill files	Red Teaming	Tools
Burp Pentest Coverage Tracker - Burp Suite extension for tracking tested endpoints	Red Teaming	Tools
Burp Variables - store and reuse variables in requests, Burp Suite extension	Red Teaming	Tools
burp-deepseek - Burp extension using DeepSeek for AI security analysis	Red Teaming	Tools
Burp2API - convert Burp Suite projects into JSON APIs	Red Teaming	Tools
burpference - LLM-powered Burp Suite extension for analyzing proxy traffic	Red Teaming	Tools
burpgpt - Burp Suite extension using GPT for vulnerability discovery	Red Teaming	Tools
BurpQL - AI-optimized query engine for Burp Suite HTTP traffic	Red Teaming	Tools
BurpSuite 403Bypasser - Burp extension to bypass 403 restricted directories	Red Teaming	Tools
Cable - .NET post-exploitation toolkit for Active Directory reconnaissance and exploitation	Red Teaming	Tools
Caido - web hacking toolkit	Red Teaming	Tools
cariddi - crawl and scan URLs for endpoints, secrets, and tokens	Red Teaming	Tools
cerberus-re - Apple reverse-engineering workbench for coding agents	Red Teaming	Tools
CFR - Java decompiler	Red Teaming	Tools
Chrome-App-Bound-Encryption-Decryption - bypass Chromium App-Bound Encryption	Red Teaming	Tools
chrome-suite - Chrome DevTools HTTP workbench with built-in AI	Red Teaming	Tools
chromedb - read Chromium cookies and local storage from disk	Red Teaming	Tools
ChromeKatz - dump cookies and credentials from Chrome/Edge process memory	Red Teaming	Tools
Chrown - Google Chrome extension exploitation framework for pentesters	Red Teaming	Tools
cirro - cloud and identity attack-path research platform	Red Teaming	Tools
Citrix Virtual Apps and Desktops XEN Unauthenticated RCE Exploit	Red Teaming	Tools
Clearwing - autonomous AI vulnerability scanner and pentest agent, open-source Glasswing alternative	Red Teaming	Tools
CloakQuest3r - uncover origin IP behind Cloudflare	Red Teaming	Tools
cloudproxy - provision cloud proxy servers to hide scraper IPs	Red Teaming	Tools
CloudRecon - Finding assets from certificates	Red Teaming	Tools
CodeNeedle - covert VS Code extension for post-exploitation runtime code execution	Red Teaming	Tools
Coercer - coerce Windows servers to authenticate to an arbitrary machine	Red Teaming	Tools
Collector - Burp Suite extension for dynamic token collection and injection	Red Teaming	Tools
Containers - Red Team tools containerized	Red Teaming	Tools
convoC2 - C2 infrastructure over Microsoft Teams	Red Teaming	Tools
CORScanner - CORS misconfiguration vulnerability scanner	Red Teaming	Tools
cr0nym on EDRmetry Playbook - 280 Linux offensive techniques for validating EDR detection coverage	Red Teaming	Tools
Crassus - Windows privilege escalation discovery tool	Red Teaming	Tools
CredMaster - password spraying tool with IP rotation via FireProx	Red Teaming	Tools
CredSpy - Entra ID user enumeration and auth method discovery via GetCredentialType API	Red Teaming	Tools
crt.name - Certificate Transparency subdomain search	Red Teaming	Tools
crt.sh - Certificate Transparency log search for subdomain recon	Red Teaming	Tools
crtmon - real-time Certificate Transparency subdomain monitor	Red Teaming	Tools
CSP Bypass - search tool for bypassing restrictive Content Security Policies	Red Teaming	Tools
ctail - tail Certificate Transparency logs and extract hostnames	Red Teaming	Tools
curing - io_uring based rootkit PoC that evades syscall-monitoring security tools	Red Teaming	Tools
curl-impersonate - curl patched to mimic Chrome, Firefox and Safari TLS fingerprints	Red Teaming	Tools
CursedChrome - malicious Chrome extension implant for red teams	Red Teaming	Tools
Custom AI Agent - Burp Suite extension with MCP tooling, AI-assisted analysis and scanning	Red Teaming	Tools
CVE-2024-6387_Check - regreSSHion OpenSSH vulnerability scanner	Red Teaming	Tools
Cybermes - autonomous offensive security and bug bounty agent framework	Red Teaming	Tools
cygor - modular asset discovery and service enumeration framework	Red Teaming	Tools
Deep Eye - AI-driven penetration testing tool	Red Teaming	Tools
Deep Hat, formerly WhiteRabbitNeo - Kindo's uncensored offensive security AI model	Red Teaming	Tools
DeepTeam - LLM and AI agent red teaming framework	Red Teaming	Tools
depthfirst launches Bug Bounty Verification - agentic pentesting to validate vulnerability reports	Red Teaming	Tools
digitalocean-app-redirector - reverse-HTTP redirector via DigitalOcean Apps for red team infra	Red Teaming	Tools
dirtyfrag - Universal Linux LPE exploit	Red Teaming	Tools
DISintegrity - analyse Android APK root and tamper detection checks	Red Teaming	Tools
DonPAPI - remote DPAPI credential dumping	Red Teaming	Tools
Doppelganger ATLAS - physical security operations platform	Red Teaming	Tools
Douglas Day shares his Claude Code init-target.sh script for bug bounty target setup	Red Teaming	Tools
DSViper - Windows Defender bypass and payload evasion	Red Teaming	Tools
DumpChromeSecrets - extract credentials, cookies and tokens from Chrome	Red Teaming	Tools
DutchOven - application-scoped Windows network brownouts for red-team validation	Red Teaming	Tools
eaphammer - evil twin attacks against WPA2-Enterprise networks	Red Teaming	Tools
Easy EASM - The Zero-Dollar Attack Surface Management Tool - Recon Village DEF CON 31	Red Teaming	Tools
eCaptureBurp - Burp Suite extension for TLS traffic captured by eCapture eBPF	Red Teaming	Tools
EDRChoker - Choking the Telemetry Stream to Bypass Defenses	Red Teaming	Tools
EDRChoker - throttle EDR agents via QoS policy to bypass defenses	Red Teaming	Tools
emploleaks - OSINT tool to detect company members with leaked credentials	Red Teaming	Tools
EmploLeaks - OSINT tool to find company employees with leaked credentials	Red Teaming	Tools
EmploLeaks - OSINT tool to find company employees with leaked credentials	Red Teaming	Tools
EntraPassTheCert - Entra ID P2P certificate post-exploitation tool	Red Teaming	Tools
Enumprotections_BOF - enumerate process protection levels	Red Teaming	Tools
EvilMist - cloud pentest and red team toolkit	Red Teaming	Tools
ExpiredDomains.net - aged expired domain search for phishing infrastructure	Red Teaming	Tools
eyeballer - Convolutional neural network for analyzing pentest screenshots	Red Teaming	Tools
F31 - Kali Linux network noise reduction tool	Red Teaming	Tools
Faction - OWASP pen test report generation and assessment collaboration framework	Red Teaming	Tools
FFUF-Workflow-Tool - automated ffuf web fuzzing and post-processing	Red Teaming	Tools
File-Tunnel - tunnel TCP connections through a file	Red Teaming	Tools
FindMyFlipper - AirTag and SmartTag emulator for FlipperZero	Red Teaming	Tools
FormThief - spoofing Windows desktop login apps	Red Teaming	Tools
frogy2.0 - Automated external attack surface intelligence toolkit	Red Teaming	Tools
frogy2.0 - automated external attack surface toolkit script	Red Teaming	Tools
gau - fetch known URLs from AlienVault OTX, Wayback Machine and Common Crawl for recon	Red Teaming	Tools
ghidra-rpc - agentic Ghidra reverse engineering skill for LLM coding assistants	Red Teaming	Tools
Ghost ESP - ESP32 pen-testing firmware	Red Teaming	Tools
Gideon - open-source autonomous security operations and red teaming agent	Red Teaming	Tools
GitHound - BloodHound OpenGraph collector for GitHub attack paths	Red Teaming	Tools
GitPhish - GitHub device code flow phishing assessment tool	Red Teaming	Tools
gluegate - proxy memory APIs via signed mozglue.dll	Red Teaming	Tools
gofuzz - recursively extract URLs and secrets from JavaScript files with JSluice and Nuclei	Red Teaming	Tools
GoLinHound - BloodHound collector for Linux and SSH attack paths	Red Teaming	Tools
GPOHound - Offensive GPO dumping and analysis tool built on BloodHound data	Red Teaming	Tools
Grapefruit - open-source mobile security testing suite for iOS and Android	Red Teaming	Tools
Graphpython - Microsoft Graph API enumeration and exploitation toolkit	Red Teaming	Tools
graphqlMaker - LLM-assisted tool to find GraphQL queries in JavaScript files	Red Teaming	Tools
GraphRobber - Microsoft Graph API post-exploitation framework	Red Teaming	Tools
GraphRunner - Post-exploitation toolset for the Microsoft Graph API	Red Teaming	Tools
GraphSpy - Initial access and post-exploitation tool for Entra ID and M365	Red Teaming	Tools
guardian-cli - AI-powered penetration testing automation	Red Teaming	Tools
gungnir - certificate transparency log scanner	Red Teaming	Tools
Hackmap - graphing and note-taking tool built for pentesting	Red Teaming	Tools
HackMap - local pentest mapping tool with visual attack paths and live command execution	Red Teaming	Tools
HAHWUL on ShadowShell - a Caido plugin for in-app terminals	Red Teaming	Tools
HaxRob on Wedgeberry - script for isolated IoT testing with mitmproxy, VPN, Tor or Burp	Red Teaming	Tools
HUNT - Burp Suite and OWASP ZAP extensions for finding vulnerable parameters	Red Teaming	Tools
HuntProxy - web security workbench for AI agents	Red Teaming	Tools
IceKube - finding complex attack paths in Kubernetes clusters	Red Teaming	Tools
IDOR Tester - AI-assisted IDOR and BOLA hunting for Burp Suite	Red Teaming	Tools
Intelligent Cyber Adversary Emulation with the Bounty Hunter	Red Teaming	Tools
Introducing open-kritt - open-source AI vulnerability research platform	Red Teaming	Tools
ipfuscator - generate alternative IPv4 address representations for filter bypass	Red Teaming	Tools
iwa-tools - offensive Active Directory tradecraft in a browser tab	Red Teaming	Tools
Jailbreaker-CE - SpecterOps local evaluation harness for jailbreak and prompt-injection testing	Red Teaming	Tools
JD Java Decompiler	Red Teaming	Tools
JNDI-Exploit-Kit	Red Teaming	Tools
Joseph Thacker on Caido's GraphQL SDKs making it better than Burp for Claude Code	Red Teaming	Tools
JS-Tap: Weaponizing JavaScript for Red Teams	Red Teaming	Tools
JSAnalyzer - Burp extension for JavaScript static analysis	Red Teaming	Tools
jshunter-burp - Burp extension that scans JavaScript files for secrets with TruffleHog	Red Teaming	Tools
JSMon - JavaScript change monitor for bug bounty	Red Teaming	Tools
jsmon - JavaScript change monitoring tool for bug bounties	Red Teaming	Tools
jsmon-go - JavaScript change monitor for bug bounty hunting	Red Teaming	Tools
jsmon.sh - JavaScript change monitoring for bug bounty recon	Red Teaming	Tools
jsrip - crawl and analyze JavaScript for secrets and endpoints	Red Teaming	Tools
k8scout - Kubernetes attack path engine for compromised pods	Red Teaming	Tools
kanti - web application testing proxy for capturing and modifying HTTP requests	Red Teaming	Tools
khaos-c2 - modern C2 post-exploitation framework with covert channels	Red Teaming	Tools
KingCastle - LDAP-based Active Directory overview for internal pentests	Red Teaming	Tools
Kiosk Tooling - browser tools for kiosk breakout and lateral movement	Red Teaming	Tools
KrakenHashes - distributed password cracking system	Red Teaming	Tools
Krueger - remotely kill EDR with WDAC	Red Teaming	Tools
KubeHound - Kubernetes attack graph and attack path tool	Red Teaming	Tools
L0phtCrack password auditing tool is now open source	Red Teaming	Tools
LabForge - Visual cyber range designer for red team lab environments	Red Teaming	Tools
LDAPmonitor - live monitoring of LDAP object changes during pentests	Red Teaming	Tools
ldapnomnom - bruteforce Active Directory usernames via LDAP Ping	Red Teaming	Tools
LDAPWordlistHarvester - extract client wordlist from Active Directory LDAP	Red Teaming	Tools
Leonidas - automated attack simulation in the cloud	Red Teaming	Tools
liffy - Local File Inclusion exploitation tool	Red Teaming	Tools
linWinPwn - Active Directory pentesting toolkit	Red Teaming	Tools
LLMFuzzer - fuzzing framework for large language models	Red Teaming	Tools
Logisek on SharePointEnum - EvilMist PowerShell tool for red team SharePoint Online search and download	Red Teaming	Tools
loophole - adversarial agents that stress-test moral principles, system prompts and legal codes	Red Teaming	Tools
lorito - HTTP security suite for exploiting web vulnerabilities and logging callbacks	Red Teaming	Tools
Ludus - cyber range platform documentation	Red Teaming	Tools
Maestro - Abusing Intune for Lateral Movement Over C2	Red Teaming	Tools
Magic-Atomics - prevention-focused LOL testing framework mapped to MITRE ATT&CK	Red Teaming	Tools
malicious-pdf - generate malicious PDF test files	Red Teaming	Tools
MANSPIDER - crawl SMB shares for sensitive files and content	Red Teaming	Tools
Mantra - recon tool for finding API keys in JavaScript files and HTML pages	Red Teaming	Tools
MapperPlus - source map extractor that recovers source code from exposed .js.map files	Red Teaming	Tools
maSSO - malicious IdP for OIDC and SAML SSO security testing	Red Teaming	Tools
Max - suite of tools for maximizing BloodHound, including the Domain Password Audit Tool	Red Teaming	Tools
MDE_Enum - Enumerate Windows Defender exclusions and ASR rules without admin	Red Teaming	Tools
MHDDoS - DDoS attack toolkit with 56 methods	Red Teaming	Tools
Michael Bargury drops powerpwn v4 to hack public Microsoft Copilot Studio agents	Red Teaming	Tools
mitmproxy2swagger - reverse-engineer REST APIs from captured traffic	Red Teaming	Tools
MOAK - Mother of All KEVs, agentic AI to exploit vulnerabilities	Red Teaming	Tools
Moxy - agentic AI DAST tool for pentesting	Red Teaming	Tools
MSSQLHound - MSSQL attack path collector for BloodHound	Red Teaming	Tools
MSSqlPwner - MSSQL pentesting and lateral movement tool	Red Teaming	Tools
NachoVPN - rogue SSL-VPN server to exploit VPN clients	Red Teaming	Tools
Nemesis - SpecterOps offensive data enrichment pipeline	Red Teaming	Tools
neobotnet - web intelligence platform mapping bug bounty attack surface	Red Teaming	Tools
NetExec Timeroast module - unauthenticated brute force of AD computer accounts via NTP	Red Teaming	Tools
newtowner - abuse trust-boundaries to bypass firewalls and network controls	Red Teaming	Tools
nezha_cyber - DeepSeek-driven TUI red team assistant	Red Teaming	Tools
nmapsilent - convert Nmap output for Project Discovery tool pipelines	Red Teaming	Tools
NoFilter - Windows Filtering Platform privilege escalation	Red Teaming	Tools
Nord Stream - extract CI/CD secrets by deploying malicious pipelines	Red Teaming	Tools
nuclei-burp-plugin - Nuclei template generator plugin for Burp Suite	Red Teaming	Tools
NucleiFuzzer - web application vulnerability scanner	Red Teaming	Tools
numasec - AI agent for cyber security	Red Teaming	Tools
offsec-tools - compiled offensive security tools	Red Teaming	Tools
onvifscan - IoT pentesting scanner for ONVIF devices	Red Teaming	Tools
Osmedeus - orchestration engine for offensive security	Red Teaming	Tools
Osmedeus - orchestration engine for security reconnaissance and vulnerability scanning workflows	Red Teaming	Tools
ParamAngler - per-parameter payload testing tool for web app bugs	Red Teaming	Tools
Parameter discovery tools comparison - x8 vs Arjun vs Param Miner	Red Teaming	Tools
Parrot Security OS - Linux distribution for penetration testing and privacy	Red Teaming	Tools
Passkey Raider - Burp Suite extension for testing Passkey systems	Red Teaming	Tools
Payload Wizard - AI assistant for generating cybersecurity payloads	Red Teaming	Tools
Pensar Apex - AI-powered autonomous pentesting agents in your terminal	Red Teaming	Tools
PentAGI - autonomous AI agents for penetration testing	Red Teaming	Tools
pentest-copilot - AI-powered ethical hacking assistant	Red Teaming	Tools
Pentest-Mapper - Burp Suite extension for pentest checklists and flow mapping	Red Teaming	Tools
periscope - automated web recon and discovery tool with Burp Suite extension	Red Teaming	Tools
PETEP - penetration testing proxy for TCP/UDP traffic analysis and modification	Red Teaming	Tools
Phishing Club - phishing simulation and red team framework	Red Teaming	Tools
pius - attack surface discovery and OSINT reconnaissance tool	Red Teaming	Tools
Porch Pirate - Postman recon and OSINT framework for exposed API endpoints	Red Teaming	Tools
PositiveIntent - Evasive loader for .NET Framework assemblies	Red Teaming	Tools
PowerHuntShares 2.0 - hunting SMB shares with charts, graphs, passwords and LLM magic	Red Teaming	Tools
Praxis - semantic command and control framework for computer-use agents	Red Teaming	Tools
pre-bounty - agent skill to map bug-bounty scope and rank targets - Forefy AI Security Registry	Red Teaming	Tools
Promptfoo - AI security platform for testing and red-teaming LLM applications	Red Teaming	Tools
proxyblob - SOCKS5 proxy over Azure Storage	Red Teaming	Tools
ProxyBlobing into your network - SOCKS5 tunneling through Azure Blob Storage	Red Teaming	Tools
PugRecon - Subdomain and public bucket intelligence for attack surface review	Red Teaming	Tools
PwNixOS - a hacking-oriented NixOS flake	Red Teaming	Tools
pwnproxy - local-first security testing platform for pentesters, AI agents and CI/CD	Red Teaming	Tools
pyLDAPGui - Python GUI for browsing LDAP with BloodHound export	Red Teaming	Tools
QRL Web - air-gap file transfer via QR code sequences	Red Teaming	Tools
rbndr.us - DNS rebinding testing service	Red Teaming	Tools
Reaper - MITM proxy for application security testing by humans and AI agents	Red Teaming	Tools
ReconAIzer - Burp Suite extension using OpenAI GPT for bug bounty recon	Red Teaming	Tools
reconftw_ai - local LLM analysis of reconftw recon results	Red Teaming	Tools
red-clippy - open-source pentest management built to be operated by an AI agent	Red Teaming	Tools
RedAI - AI-driven vulnerability discovery and live validation	Red Teaming	Tools
redteam-collab - red team collaboration infrastructure	Red Teaming	Tools
redteam-infra - reference deployment recipes for red team infrastructure	Red Teaming	Tools
redteamtl - red team assessment timeline visualization tool	Red Teaming	Tools
RegIntel - AI-powered pentest regulatory intelligence with LangGraph agents	Red Teaming	Tools
remotechrome - dump Chrome cookies remotely via atexec and CDP	Red Teaming	Tools
repshot - Burp Suite extension to generate security finding cards	Red Teaming	Tools
ResetNightmare - POC for CVE-2026-27912 Kerberos password reset	Red Teaming	Tools
Reverse Shell Generator - revshells.com	Red Teaming	Tools
reverse-skill - AI reverse engineering and pentest skill router for coding agents	Red Teaming	Tools
Rogue - LLM agent for automated web vulnerability scanning	Red Teaming	Tools
RogueSliver - tools to disrupt Sliver C2 campaigns	Red Teaming	Tools
RSC_Detector - React Server Components fingerprinting and CVE-2025-55182 exploitation	Red Teaming	Tools
RunasCs - open Csharp version of Windows runas.exe	Red Teaming	Tools
Rusty-Telephone - audio covert channel data exfiltration	Red Teaming	Tools
s3tk - S3 bucket security scanner for bug bounty and pentesting	Red Teaming	Tools
samoscout - LLM-powered passive and active subdomain enumeration tool	Red Teaming	Tools
SCOPE - AI agent for cloud security purple teaming	Red Teaming	Tools
ScrappyDoo - OpenGraph-compatible JSON generator for BloodHound	Red Teaming	Tools
scrying - NCC Group tool for collecting RDP, web and VNC screenshots	Red Teaming	Tools
SecLists - the security tester's companion wordlists	Red Teaming	Tools
SecorizonAI - terminal-native AI shell for pentesters	Red Teaming	Tools
SetupHijack - exploit race conditions in Windows installers	Red Teaming	Tools
ShadowClone - distribute recon and bug bounty tasks across serverless functions	Red Teaming	Tools
ShadowHound - a SharpHound alternative using native PowerShell	Red Teaming	Tools
ShareFiltrator - SharePoint sensitive file enumeration and bulk download	Red Teaming	Tools
SharpShares - enumerate accessible network shares in a domain	Red Teaming	Tools
shortscan - IIS short filename enumeration tool	Red Teaming	Tools
Shwmae - Windows Hello abuse tool	Red Teaming	Tools
Singularity of Origin - DNS rebinding attack framework	Red Teaming	Tools
sj - Swagger Jacker, auditing tool for exposed Swagger/OpenAPI definition files	Red Teaming	Tools
Slack Jack - Hijack a Slack bot token for phishing and enumeration	Red Teaming	Tools
smokedmeat - CI/CD red team framework	Red Teaming	Tools
SmokedMeat: A Red Team Tool to Hack Your Pipelines First	Red Teaming	Tools
Sn1per - automated penetration testing and attack surface management platform	Red Teaming	Tools
Snaffler - find credentials in Windows/AD file shares	Red Teaming	Tools
spy-extension - Chrome extension that steals everything it can	Red Teaming	Tools
SSH-Snake - self-propagating SSH key and host discovery tool	Red Teaming	Tools
SSHamble - runZero research tool for attacks against SSH implementations	Red Teaming	Tools
Sshimpanzee - reverse SSH server with ICMP, DNS and HTTP tunnelling for red team post-exploitation	Red Teaming	Tools
SSRFUtility - SSRF exploitation tool	Red Teaming	Tools
STE.GG - steganography encode, decode and analyze tool	Red Teaming	Tools
steampipe-plugin-projectdiscovery - query ProjectDiscovery recon tools with SQL	Red Teaming	Tools
Stepping Stones - A Red Team Activity Hub	Red Teaming	Tools
subby - fast subdomain enumeration tool	Red Teaming	Tools
SuperSharpShares - automated domain SMB share enumeration	Red Teaming	Tools
sw33tLie on uff, his ffuf fork for bug bounty fuzzing	Red Teaming	Tools
SysReptor - pentest reporting platform	Red Teaming	Tools
T3MP3ST - autonomous multi-agent offensive-security red teaming platform	Red Teaming	Tools
T3MP3ST - autonomous multi-agent offensive-security red teaming platform	Red Teaming	Tools
TaskHound - hunting privileged scheduled tasks on remote systems	Red Teaming	Tools
TeamsPhisher - send phishing messages and attachments to Microsoft Teams users	Red Teaming	Tools
teamstracker - monitoring Microsoft Teams user presence via Graph proxy	Red Teaming	Tools
Tenzai - AI hacker for enterprise, autonomous penetration testing agents	Red Teaming	Tools
Terra Security - Agentic Offensive Security Platform	Red Teaming	Tools
The Shelf - retired TrustedSec offensive security capabilities	Red Teaming	Tools
thermoptic - HTTP stealth proxy that cloaks requests as Chrome to defeat fingerprinting	Red Teaming	Tools
Tib3rius announces Collector, a Burp Suite extension for collecting and tracking tokens	Red Teaming	Tools
TokenCert - network token creation via certificates using PKINIT	Red Teaming	Tools
TokenFlare: Serverless AiTM Phishing in Under 60 Seconds	Red Teaming	Tools
Trickest - security execution platform for ASM, scanning, and agentic pentesting workflows	Red Teaming	Tools
Trickest - security execution platform for offensive security workflows and agentic pentesting	Red Teaming	Tools
TTPRunner - autonomous TTP execution agent for purple teaming	Red Teaming	Tools
uff - unleashed ffuf fork for web fuzzing	Red Teaming	Tools
uncover - discover exposed hosts on the internet using multiple search engines	Red Teaming	Tools
USB Army Knife - close-access tool for pentesters and red teamers	Red Teaming	Tools
VERDICT - autonomous AI web and API pentest agent	Red Teaming	Tools
Verizon AI Burp Extensions - VAIBE, AI-assisted Burp Suite extension suite	Red Teaming	Tools
Vespasian - API discovery and spec generation from live traffic	Red Teaming	Tools
Visa Vulnerability Agentic Harness - PR #10 document update adding two phases	Red Teaming	Tools
VMkatz - extract Windows credentials from VM snapshots	Red Teaming	Tools
waymore - find URLs from Wayback Machine and other archives	Red Teaming	Tools
web-check - all-in-one OSINT tool for analysing any website	Red Teaming	Tools
WinSSHound - Windows SSH misconfiguration discovery for AD lateral movement paths	Red Teaming	Tools
Wonka - extract Kerberos tickets from the LSA cache	Red Teaming	Tools
wpprobe - fast WordPress plugin enumeration tool	Red Teaming	Tools
wsuks - automating the WSUS MITM attack	Red Teaming	Tools
XBOW - autonomous AI offensive security and pentesting platform	Red Teaming	Tools
XBOW Embeds Continuous, AI-Driven Penetration Testing in the Microsoft Security Ecosystem	Red Teaming	Tools
XBOW pricing - autonomous AI penetration testing platform	Red Teaming	Tools
xnLinkFinder - discover endpoints, parameters, wordlists and secrets for a target	Red Teaming	Tools
XSinator - XS-Leak browser test suite	Red Teaming	Tools
Yak Project - open-source security infrastructure with Yakit, IRify static analysis and Memfit AI	Red Teaming	Tools
yaklang - a programming language designed for cybersecurity	Red Teaming	Tools
ZANCUDO - open-source MQTT interception proxy for IoT pentesting	Red Teaming	Tools
List of AI Hacki	Red Teaming	Resources
If you're using AI for bug bounty, you already know the two	Red Teaming	Resources
It is hard to communicate how much bug bounty has changed due	Red Teaming	Resources
A secure way to code via Signal. In	Red Teaming	Resources
Gandalf - Lakera – Test your AI hacking skills	Red Teaming	Resources
finbot-ctf - Vulnerable Agentic AI Platform for AI Security CTF	Red Teaming	Resources
AI hacking agents keep rejecting your requests? Drop a legit\-looking pentest authorization,	Red Teaming	Resources
🛡⚔️AI-Powered Penetrati	Red Teaming	Resources
Fully autonomous AI hacker to find act	Red Teaming	Resources
Announcing BlackIce: A Containerized Red Teaming Toolkit for AI Sec	Red Teaming	Resources
Automatic Exploit Generation	Red Teaming	Resources
On the Coming Industrialisation of Exploit Generation with LLMs	Red Teaming	Resources
It's the wildest thing these LLM pentesting frameworks blindly trust output from	Red Teaming	Resources
EVA is an AI-assisted penetration testing a	Red Teaming	Resources
Frontier Model Performance on Offensive-Security Tasks: Emerging Ev	Red Teaming	Resources
LLM-Powered AMSI Provider vs. Red Team Agent	Red Teaming	Resources
Practical LLM Security Advice from the NVIDIA AI Red Team - NVIDIA	Red Teaming	Resources
BlackIce: A Containerized Red Teaming Toolkit for AI Security Testing	Red Teaming	Resources
A project to automate the pente	Red Teaming	Resources
Hacking with AI SASTs: An overview of 'AI Security Engineers' /	Red Teaming	Resources
How We Exploited CodeRabbit: From a Simple PR to RCE and Write	Red Teaming	Resources
PentestJudge: Judging Agent Behavior Against Operational Requirements \-https://t.co/UgM49zhppJ by @dreadnode Introducing PentestJudge,	Red Teaming	Resources
The Deepfake Offensive Toolkit	Red Teaming	Resources
GPT-5 Under Fire: Red Teaming OpenAI's Latest Model Reveals Surpr	Red Teaming	Resources
Learn Prompting: Your Guide to Communicating with AI	Red Teaming	Resources
Critical Langflow RCE flaw exploited to hack AI app servers	Red Teaming	Resources
OWASP LLM Exploit Generation v1.0 - OWASP Top 10 for LLM &	Red Teaming	Resources
Prompt Airlines - AI CTF by Wiz	Red Teaming	Resources
Project Naptime: Evaluating Offensive Security Capabilities of Larg	Red Teaming	Resources
Talos launching new machine learning-based exploit detection engine	Red Teaming	Resources
An Empirical Evaluation of LLMs for Solving Offensive Security Chal	Red Teaming	Resources
Announcing Microsoft's open automation framework to red team genera	Red Teaming	Resources
A collection of real world AI/ML ex	Red Teaming	Resources
OpenAI Needs To Fix ChatGPT Exploit Before its Store Opens	Red Teaming	Resources
Google's AI Red Team: the ethical hackers making AI safer	Red Teaming	Resources
FakeToxicityPrompts: Automatic Red Teaming	Red Teaming	Resources
Announcing OpenAI's Bug Bounty Program	Red Teaming	Resources
acedef/SynthAPT	Red Teaming	Resources
Whomp whomp	Red Teaming	Resources
CrowdStrike Secures AI Attack Surface with Falcon AIDR	Red Teaming	Resources
CVE-2025-6515 Prompt Hijacking Attack - How Session Hijacking Affec	Red Teaming	Resources
Attacking AI (Live, August 18th & 20th)	Red Teaming	Resources
SHIFT - AI-Powered Hacking	Red Teaming	Resources
AttackGen is a cybersecurity incident	Red Teaming	Resources
The AI Attack Surface Map v1.0	Red Teaming	Resources
MUZZLE: Adaptive Agentic Red-Teaming of Web Agents Against Indirect Prompt Injection Attacks	Red Teaming	Resources
One Proxy. One AI. One System: Integrating Caido into mastermind-ai	Red Teaming	Resources
Introducing Assessment Guidance: Map Your Brain Onto XBOW's	Red Teaming	Resources
Teaching Claude Everything You've Hacked	Red Teaming	Resources
How My AI Hunting System Found Two Critical Vulns in a Private Bug Bounty — While I Was Out	Red Teaming	Resources
How We Hacked McKinsey's AI Platform	Red Teaming	Resources
Pwning AI Code Interpreters in AWS Bedrock AgentCore	Red Teaming	Resources
Killer Agent Framework Features	Red Teaming	Resources
How do frontier AI agents perform in multi-step cyber-attack scenarios?	Red Teaming	Resources
The new HTB Certified Offensive AI Expert (HTB CO-AE) is officially here	Red Teaming	Resources
I Took HTB's AI Red Teamer Path. Here's What I Think.	Red Teaming	Resources
METATRON: AI-Powered Penetration Testing Assistant	Red Teaming	Resources
Assessing Claude Mythos Preview's cybersecurity capabilities	Red Teaming	Resources
Building an Automated Pipeline with LangChain DeepAgents to Find Zero-Days in Kernel Drivers. It Found One in ASUS.	Red Teaming	Resources
llm-rtk: Objective-driven adversarial testing framework for GenAI systems aligned with OWASP GenAI Top 10 risks	Red Teaming	Resources
Abliteration.ai releases abliterated GLM-5.3 for offensive cyber and red teaming	Red Teaming	Resources
Adam Chester on using Claude Code channels in CI to auto-evade YARA detections	Red Teaming	Resources
Aether AI: the agentic attack AI that learns from every pentest so defences improve at machine speed	Red Teaming	Resources
ai-red-team-course - 8-week course from web/API/cloud hacker to AI red teamer	Red Teaming	Resources
alldomains - bug bounty domain and subdomain lists	Red Teaming	Resources
Arcanum AI Security Resource Hub - labs, CTFs, bounties and tooling for AI red teaming	Red Teaming	Resources
Arcanum Security - Jason Haddix's offensive security and AI security training and consulting	Red Teaming	Resources
Authorized - AI-drafted letters of authorization for security testing	Red Teaming	Resources
Awesome OSINT For Everything	Red Teaming	Resources
awesome-lolbins-and-beyond - curated list of LOLBins, GTFO and Living Off the Land resources	Red Teaming	Resources
BloodHound Ecosystem - curated list of BloodHound tools and collectors	Red Teaming	Resources
Buffer Overflow cheatsheet - guif.re	Red Teaming	Resources
byor - Build-Your-Own-Ransomware hands-on exercises	Red Teaming	Resources
Can AI do novel security research? Meet the HTTP Terminator	Red Teaming	Resources
can-i-take-over-xyz - subdomain takeover reference	Red Teaming	Resources
Comparing AI Application Security Testing Platforms	Red Teaming	Resources
copy.golf - golf your exploits	Red Teaming	Resources
Corben Leo - bug bounty find from a 404 route disclosure	Red Teaming	Resources
CrowdStrike Launches AI Red Team Services to Secure AI Innovation	Red Teaming	Resources
Dead.Letter - How XBOW found an unauthenticated RCE on Exim	Red Teaming	Resources
DefaultCreds-cheat-sheet - default credentials list for red and blue teamers	Red Teaming	Resources
DevOps Attack Surface - Pentester's Guide to CI/CD pipeline attacks	Red Teaming	Resources
Disclosure Index - searchable archive of 11,000+ public bug bounty disclosures	Red Teaming	Resources
drift-corpus - Windows kernel patch diffs produced by an AI reverse engineering agent	Red Teaming	Resources
DVKA - Damn Vulnerable Kubernetes Application	Red Teaming	Resources
Evaluating and mitigating the growing risk of LLM-discovered 0-days	Red Teaming	Resources
Everything I Own, Owned - reverse engineering five consumer peripherals with a Claude agent	Red Teaming	Resources
Forefy AI Security Registry - audit-goal for AI-driven security assessments	Red Teaming	Resources
From a Copilot to Cluster Admin: inside AtlasOps, Pillar Security's free agent-security CTF	Red Teaming	Resources
GPT-5.5: Mythos-Like Hacking, Open to All - XBOW's early-access offensive security evaluation	Red Teaming	Resources
grimoire - Offline full-text search across offensive security knowledge bases	Red Teaming	Resources
GTFOArgs - argument injection exploitation vector list for Unix binaries	Red Teaming	Resources
GTFOBins	Red Teaming	Resources
Hack-A-Sat - Space Cybersecurity CTF	Red Teaming	Resources
How I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel's SMB implementation	Red Teaming	Resources
How pentesting mirrors the evolution of quality assurance	Red Teaming	Resources
HSC24RedTeamInfra - Red Team Infrastructure Automation workshop slides and code	Red Teaming	Resources
It's More Than Saying No - when leadership asks your offensive security team to do work it wasn't designed for	Red Teaming	Resources
Lessons from Red Teaming 100 Generative AI Products - Microsoft AI Red Team whitepaper	Red Teaming	Resources
Live Bug Bounty Recon & Enumeration - HackerOne Starbucks program	Red Teaming	Resources
Local AI for Penetration Testing and Research	Red Teaming	Resources
LVE Repository - documenting vulnerabilities and exposures of large language models	Red Teaming	Resources