Strix 是一个开源的 AI 自动化渗透测试工具。你给它一个目标（代码目录、GitHub 仓库或者线上地址），一群 AI Agent 就会像真人黑客一样，自动跑你的应用、找漏洞、写 PoC 验证，最后给你一份报告。跟传统扫描器的最大区别：Strix 会动态运行你的代码，真正去「打」一遍，验证通过的才算漏洞，不是简单的模式匹配。 (opens new window)

许多黑客工具都是零散的 GitHub 仓库，安装繁琐、兼容性差、更新困难。hackingtool 把这一切打包成一个现代化 TUI（文本用户界面） 框架 (opens new window)

Kali部署HexStrike配合Trae提高挖洞效率 (opens new window)

PentAGI is an innovative tool for automated security testing that leverages cutting-edge artificial intelligence technologies. The project is designed for information security professionals, researchers, and enthusiasts who need a powerful and flexible solution for conducting penetration tests. (opens new window)

Shannon Lite is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production. (opens new window)

https://github.com/hackerai-tech/PentestGPT

OSINT Maigret - collects a dossier on a person by username only (opens new window)

Claude Code Skills 投毒事件全解析 (opens new window)

从0实现网络安全“小”模型.md https://mp.weixin.qq.com/s/XyMmMl_XDithOt7gsW5qeA

新手用ChatGPT仅需数小时轻松构建零日漏洞，69家专业公司都检测不出来：“不仅能调用开源库，还能彻底重写源代码” https://mp.weixin.qq.com/s/iY4sG9TFC0kOi7xTdJttTw

MistTrack Agent Skills (opens new window)

‍装了 OpenClaw 后，信用卡被盗刷了... (opens new window)

Kali&LLM(Ollama&5ire)

Yakit: 集成化单兵安全能力平台 (opens new window)

渗透测试Payload速查平台 | Pentest Payload Quick Reference | XSS/SQLi/SSRF/RCE | React+TypeScript (opens new window)

Useful tool to track location or mobile number, so this tool can be called osint or also information gathering (opens new window)