Ahmet Göker

n8n-ai-agent-security-lab. CSINT Research side project for static and staging-safe security regression checks of n8n AI workflows.

sec-gemini. Sec-Gemini is a cutting-edge AI model designed to enhance cybersecurity capabilities and empower defenders in the ongoing battle against cyber threats.

worldmonitor. Real-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational awareness interface

OpenOSINT. AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 19 tools. Works with Claude, GPT-4, or local models. For authorized security research only.

taranis-ai. Taranis AI is an advanced Open-Source Intelligence (OSINT) tool, leveraging Artificial Intelligence to revolutionize information gathering and situational analysis.

opencode. The open source coding agent.

academic-research-skills-codex. Codex-native Academic Research Skills suite for human-in-the-loop academic research workflows

defending-code-reference-harness. Skills for threat modeling, scanning, triage, patching, plus an autonomous scanning harness you can /customize

whisper. Robust Speech Recognition via Large-Scale Weak Supervision

project-learnops. Cloud and Devops Learning Platform

Shadowbroker. Open-source intelligence for the global theater. Track everything from the corporate/private jets of the wealthy, and spy satellites, to seismic events in one unified interface. Hook an AI agent up to have it parse through data and find previously unseen correlations. The knowledge is available to all but rarely aggregated in the open, until now.

x-algorithm. Algorithm powering the For You feed on X

countries-states-cities-database. 🌍 Discover our global repository of countries, states, and cities! 🏙️ Get comprehensive data in JSON, SQL, PSQL, SQLSERVER, MONGODB, SQLITE, XML, YAML, and CSV formats. Access ISO2, ISO3 codes, country code, capital, native language, timezones (for countries), and more. #countries #states #cities

OpenMythos. A theoretical reconstruction of the Claude Mythos architecture, built from first principles using the available research literature.

autoware. Autoware - the world's leading open-source software project for autonomous driving

damn-vulnerable-llm-agent. Python

promptfoo. Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.

garak. the LLM vulnerability scanner

ai-data-extraction. extract all your personal data history from cursor, codex, claude-code, windsurf, and trae

awesome-ai-security. A collection of awesome resources related AI security

kernel-ctf-lab. Linux Kernel Exploitation CTF Lab

Awesome-CV. :page_facing_up: Awesome CV is LaTeX template for your outstanding job application

N4TIVE. Android Native CTF. Six challenges focused on reversing .so libraries: buffer overflow, heap exploitation, anti-debug bypass, custom VM, and more.

OSINT_Collection. Maintained collection of OSINT related resources. (All Free & Actionable)

EpsteOut. See which of your LinkedIn connections appear in the Epstein files.

open-notebook. An Open Source implementation of Notebook LM with more flexibility and features

SentryRadio. [XPOSED|MAGISK|KSU] A Android forensic tool designed to detect, analyze, and map cellular network anomalies, including potential IMSI Catchers (Stingrays), cell site simulators, and suspicious network downgrades and Silent SMS.

PwnAdventure3. PwnAdventure3 Server

Singularity. Stealthy Linux Kernel Rootkit for modern kernels (6x)

openclaw. Your own personal AI assistant. Any OS. Any Platform. The lobster way. 🦞

MathSathi-Helping-RAG-AI-Agent. OUR MATH HElping AGenT

AI-Researcher. [NeurIPS2025] "AI-Researcher: Autonomous Scientific Innovation" -- A production-ready version: https://novix.science/chat

Dolphin. The official repo for “Dolphin: Document Image Parsing via Heterogeneous Anchor Prompting”, ACL, 2025.

Hacking-guide. HTML

Awesome-OSINT-List. 📡 Comprehensive collection of OSINT tools for cybersecurity professionals, researchers, and bug bounty hunters. Topics: information gathering, reverse search, red team, trust & safety, AI.

internet_archive_downloader. A chrome/firefox extension that download books from Internet Archive(archive.org) and HathiTrust Digital Library (hathitrust.org)

how2heap. A repository for learning various heap exploitation techniques.

lpic3book. LPIC3 Study Guide in plain English

DeepSeek-OCR. Contexts Optical Compression

chatterbox. SoTA open-source TTS

apk-mitm. 🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection

evilgophish. evilginx3 + gophish

BITB. Browser In The Browser (BITB) Templates

ScoutSuite. Multi-Cloud Security Auditing Tool

DeepFaceLive. Real-time face swap for PC streaming or video calls

GhidraMCP. MCP Server for Ghidra

iOS_Reverse_Engineering. The iOS IPA file Reverse Engineering reference

google-dorks-bug-bounty. A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting

amILearningEnough. Low-Level Programming Roadmap and Resources

impacket. Impacket is a collection of Python classes for working with network protocols.

simurai. Shell

Certified-Red-Team-Professional-CRTP---Notes. Certified Red Team Professional (CRTP) - Notes

Vahaka. JavaScript

codex. Lightweight coding agent that runs in your terminal

Red-Teaming. Collection of Notes and CheatSheets used for Red teaming Certs

LLM4Decompile. Reverse Engineering: Decompiling Binary Code with Large Language Models

PenetrationTesting_Notes-. My Notes about Penetration Testing

mdmz_book. The result of research and investigation of malware development tricks, techniques, evasion, cryptography and linux malware

OSEE. Collection of resources for my preparation to take the OSEE certification.

Detect-It-Easy. Program for determining types of files for Windows, Linux and MacOS.

medusa. Mobile Edge-Dynamic Unified Security Analysis

windows-security-research-resources. Compiled by !cpuid from the OffSec Discord server!

every-programmer-should-know. A collection of (mostly) technical things every software developer should know about

malwoverview. Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.

payload-wizard. AI assistant that utilizes GPT language models to interpret and generate cybersecurity payloads 🪄

Nightingale. Nightingale Docker for Pentesters is a comprehensive Dockerized environment tailored for penetration testing and vulnerability assessment. It comes preconfigured with all essential tools and utilities required for efficient Vulnerability Assessment and Penetration Testing (VAPT), streamlining the setup process for security professionals.

vulnserver. Vulnerable server used for learning software exploitation

reFlutter. Flutter Reverse Engineering Framework

CORS-one-liner. A one liner Bash command which finds CORS in every possible endpoint.

tweet-machine. This tool can retrieve : 1.Deleted tweets and replies ,Even if The account is suspended 2 .Old bios and Timestamp of The tweets

SSL-bypass. SSL bypass check

Best-websites-a-programmer-should-visit. :link: Some useful websites for programmers.

code_caver. Python based WinDbg script to automate the search for code caves in binaries and libraries.

windbg-readable-theme. Windbg Readable & Dark Green Theme - Own Use

OSED. Containing my notes, practice binaries + solutions, blog posts, etc. for the Offensive Security Exploit Developer (OSED/EXP-301)

Malimite. iOS and macOS Decompiler

BadUnboxing. Automated Android custom unpacker generator

prompts.chat. f.k.a. Awesome ChatGPT Prompts. Share, discover, and collect prompts from the community. Free and open source — self-host for your organization with complete privacy.

awesome-cursorrules. 📄 Configuration files that enhance Cursor AI editor experience with custom rules and behaviors

awesome-ai-agents. A list of AI autonomous agents

USBArmyKnife. USB Army Knife – the ultimate close access tool for penetration testers and red teamers.

frida-interception-and-unpinning. Frida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic

rush. A cross-platform command-line tool for executing jobs in parallel

httpx. httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

assetfinder. Find domains and subdomains related to a given domain

evilginx2. Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

owasp-mstg. The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.

qark. Tool to look for several security related Android application vulnerabilities

matlog. Material Logcat reader based on CatLog

drozer-agent. The Android Agent for the Drozer Security Assessment Framework.

Android-InsecureBankv2. Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities

awesome-mobile-security. An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.

awesome-android-root. Discover best root apps, Magisk, KernelSu & LSPosed(xposed) modules & rooting guides

awesome-oscp. A curated list of awesome OSCP resources

frida-ue4dump. UE4 dump frida script

mastg. The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

awesome-adb. ADB Usage Complete / ADB 用法大全

Android-Security-Teryaagh. Android security guides, roadmap, docs, courses, write-ups, and teryaagh.

cline. Autonomous coding agent as an SDK, IDE extension, or CLI assistant.

OSCP-Preparation-Material. All in One OSCP Preparation Material

ImHex. 🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

markitdown. Python tool for converting files and office documents to Markdown.

jan. Jan is an open source alternative to ChatGPT that runs 100% offline on your computer.

e9patch. A powerful static binary rewriting tool

kasld. KASLD derandomizes the Linux kernel's virtual and physical memory layout from a local process, using whatever its vantage — privilege, configuration, and confinement — allows.

LinuxKernelExploitation. Old and new CTFs about Linux kernel exploitation.

linux-kernel-exploitation. A collection of links related to Linux kernel security and exploitation

Qu1cksc0pe. All-in-One malware analysis tool.

DeepSeek-V3. Python

patch-apk. Wrapper to inject an Objection/Frida gadget into an APK, with support for app bundles/split APKs.

Kernel-Linux. C

security-research. This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

Dependency-Confusion. All About Dependency Confusion Attack, (Detecting, Finding, Mitigating)

mal_unpack. Dynamic unpacker based on PE-sieve

eLearnSecurity-Mobile-Application-Penetration-Tester-eMAPT. eLearnSecurity Mobile Application Penetration Tester (eMAPT)

InjuredAndroid. A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.

Buffer-Overflow-Exploit-Development. This repo explains in details about buffer overflow exploit development for windows executable.

Security-101. 8 Lessons, Kick-start Your Cybersecurity Learning.

Dopamine. Dopamine is a semi-untethered jailbreak for iOS 15 and 16

PEASS-ng. PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

pspy. Monitor linux processes without root permissions

AndroidPentest101. The motive to build this repo is to help beginner to start learn Android Pentesting by providing a roadmap.

MobileApp-Pentest-Cheatsheet. The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

bootOS. bootOS is a monolithic operating system in 512 bytes of x86 machine code.

drozer. The Leading Security Assessment Framework for Android.

ghost-1. Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device. Ghost Framework gives you the power and convenience of remote Android device administration.

sunfish. Sunfish: a Python Chess Engine in 111 lines of code

VMware-Workstation-Pro-17-Licence-Keys. Free VMware Workstation Pro 17 full license keys. We've meticulously organized thousands of keys, catering to all major versions of VMware Workstation Pro 17 Choose from our curated selection to enhance your virtualization experience.

mdk3-master. Modifications to MDK3 to reboot Access Points

aircrack-ng. WiFi security auditing tools suite

flareon2024. Python

vulnerability-Checklist. This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

Awesome_Math_Books.

pwnlook. An offensive postexploitation tool that will give you complete control over the Outlook desktop application and therefore to the emails configured in it.

BlackObfuscator. Black Obfuscator is an obfuscator for Android APK DexFile, it can help developer to protect source code by control flow flattening, and make it difficult to analyze the actual program control flow.

EmbedPayloadInPng. Embed a payload inside a PNG file

MTProxy. C

PentestGPT. Automated Penetration Testing Agentic Framework Powered by Large Language Models

EDRSilencer. A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

objection. 📱 objection - runtime mobile exploration

100-redteam-projects. Projects for security students

drmemtrace_samples. Memory trace samples from DynamoRIO's drmemtrace tracer for its drcachesim analyzer

Online-Crawler-Wayback-Machine. Online-Crawler-Wayback-Machine

Vertex. iOS kernel exploit for iOS 14 and 15

Kraken. All-in-One Toolkit for BruteForce Attacks

nexfil. OSINT tool for finding profiles by username

security-tools. My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

UEFITool. UEFI firmware image viewer and editor

smart-contract-vulnerabilities. A collection of smart contract vulnerabilities along with prevention methods

dynamorio. Dynamic Instrumentation Tool Platform

eJPTv2-Notes. eLearnSecurity Junior Penetration Tester (eJPT) v2 Notes

awesome-malware-development. Curated resources for malware dev, reverse engineering, and defensive security research.

the-art-of-fuzzing. Application Fuzzing: Tools, Techniques, and Best Practices

loxs. best tool for finding SQLi,CRLF,XSS,LFi,OpenRedirect

binwalk. Firmware Analysis Tool

One-Liners. A collection of one-liners for bug bounty hunting.

BlueTeam-Tools. Tools and Techniques for Blue Team / Incident Response

tosint. Tosint is a Telegram OSINT tool that extracts actionable intelligence from bot tokens and chat IDs for security investigations.

bughunter. Tools for BugHunting

WADark. WADark - Whatsapp Phishing Tool via OTP Code

kxss. This a adaption of tomnomnom's kxss tool with a different output format

osint_stuff_tool_collection. A collection of several hundred online tools for OSINT

Mobile-Security-Framework-MobSF. Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

hackerone-reports. Top disclosed reports from HackerOne

informer. A Telegram Mass Surveillance Bot in Python

RE-iOS-Apps. A completely free, open source and online course about Reverse Engineering iOS Applications.

DVIA-v2. Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This project is developed and maintained by @prateekg147. The vulnerabilities and solutions covered in this app are tested up to iOS 11. The current version is writen in Swift and has the following vulnerabilities.

Invoke-Stealth. Simple & Powerful PowerShell Script Obfuscator

CTF-Game-Challenges. A curated list of Game Challenges from various CTFs

windows-api-function-cheatsheets. A reference of Windows API function calls, including functions for file operations, process management, memory management, thread management, dynamic-link library (DLL) management, synchronization, interprocess communication, Unicode string manipulation, error handling, Winsock networking operations, and registry operations.

OffSec-Reporting. Offensive Security OSCP+, OSEP, OSWP, OSWA, OSWE, OSED, OSMR, OSEE, OSDA, OSIR, OSTH Exam and Lab Reporting / Note-Taking Tool

minhook. The Minimalistic x86/x64 API Hooking Library for Windows

Detours. Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.

hooking-by-example. A series of increasingly complex programs demonstrating function hooking on 64 bit Windows. Culminating in a program that hooks mspaint to make it always paint orange.

osint-repos-list. List of OSINT Repositories starred from GitHub (limited access version)

reversing-list. Reversing list

awesome-security. A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

Awesome-GPT-Agents. A curated list of GPT agents for cybersecurity

hollows_hunter. Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

TitanHide. Hiding kernel-driver for x86/x64.

pyinstxtractor-ng. PyInstaller Extractor Next Generation

Docker-OSX. Run macOS VM in a Docker! Run near native OSX-KVM in Docker! X11 Forwarding! CI/CD for OS X Security Research! Docker mac Containers.

OSWP. Notes and cheatsheets for the OffSec Wireless Professional (OSWP) certification

Red-Team-Exercises. C++

OSCP-Exam-Report-Template-Markdown. :orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report

bof-scripts. A combination of some scripts that may assist during OSCP Buffer Overflow.

TelAnalysis. TelAnalysis - Telegram Analysis tool

toutatis. Toutatis is a tool that allows you to extract information from instagrams accounts such as e-mails, phone numbers and more

the-definite-guide-to-arm-exploitation. Code Samples for the book "The Definite Guide to ARM Exploitation"

eCPPT-resources. A compilation of resources for studying for the eCPPTv2

Offsec-Practice-Labs. Offsec Practice Labs is a curated training arsenal for hands-on prep across eCPPTv3, OSCP, and CPTS.

meow. Cybersecurity research results. Simple C/C++ and Python implementations

paper_collection. Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to read or have already read

awesome-lists. Awesome Security lists for SOC/CERT/CTI

rust-blog. Educational blog posts for Rust beginners

Social-Media-OSINT-Tools-Collection. A collection of most useful osint tools for SOCINT.

HellsGate. Original C Implementation of the Hell's Gate VX Technique

ROPgadget. This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.

30-Days-Of-Python. The 30 Days of Python programming challenge is a step-by-step guide to learn the Python programming language in 30 days. This challenge may take more than 100 days. Follow your own pace. These videos may help too: https://www.youtube.com/channel/UC7PNRuno1rzYPb1xLa4yktw

semantic-kernel. Integrate cutting-edge LLM technology quickly and easily into your apps