Tokeii

codex-security. OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

meow-detective. MEOW~

Codex-Dream-Skin. Codex Dream Skin

TencentDB-Agent-Memory. TencentDB Agent Memory is a team-level memory hub for AI Agents — turning conversations, docs, and code into four reusable memory assets (Chat Memory, Skill, LLM-Wiki, Code-Graph) that are governed, shared, and equipped across agents and frameworks.

jmcomic-ai. 禁漫天堂 Agent Skills / AI 原生 JMComic 助手：通过 MCP 与 Skills 将 JMComic 注入你的 AI Agent. / AI-powered JMComic assistant for seamless integration with AI Agents via MCP & Skills.

LovelyMiscLab. 面向取证的节点式可视化工作台 —— 像 ComfyUI 一样搭工作流，专为编码解密、隐写取证、图像分析、密码学而生。

Aliens_eye. Hunt down 840+ social media accounts using AI

muteki. Project Muteki (無敵): autonomous multi-model CTF-solving AI agent swarm

MemNixFS. Linux Memory Forensics Framework That Transforms Memory Dumps Into a Navigable Filesystem

Universal-LPC-Spritesheet-Character-Generator. Character Generator based on Universal-LPC-Spritesheet

warp. Warp is an agentic development environment, born out of the terminal.

ForensiFlow. Python

andrej-karpathy-skills. A single CLAUDE.md file to improve Claude Code behavior, derived from Andrej Karpathy's observations on LLM coding pitfalls.

wireshark. Read-only mirror of Wireshark's Git repository at https://gitlab.com/wireshark/wireshark. You're welcome to submit pull requests there.

upx. UPX - the Ultimate Packer for eXecutables

CVE-2026-0073-Android-adbd-authentication-bypass-POC. Python

dirtyfrag. C

Magicmida. Themida unpacker

Learn-Web-Hacking. Study Notes For Web Hacking / Web安全学习笔记

CC-BOS. Python

frida. Clone this repo to build Frida

skills. agent skills

arnis. Generate any location from the real world in Minecraft with a high level of detail.

ui-ux-pro-max-skill. An AI SKILL that provide design intelligence for building professional UI/UX multiple platforms

FlowAnalyzer. 一个基于 Tshark 的高性能流量分析器。采用流式解析与 SQLite 缓存架构，专为处理海量数据包设计，内存占用极低且支持秒级二次加载。

RuView. π RuView turns commodity WiFi signals into real-time spatial intelligence, vital sign monitoring, and presence detection — all without a single pixel of video.

CTFCrackTools. The next-generation CTF Swiss Army Knife powered by Rust & Tauri. Features a visual node-based workflow and local AI intelligence for extreme performance and automation.China's first CTFTools framework.

binwalk. Firmware Analysis Tool

LensAnalysis. 析镜 LensAnalysis是一款基于 Volatility 3 框架的图形化内存取证工具，专为 CTF 竞赛和安全研究设计。

openclaw. Your own personal AI assistant. Any OS. Any Platform. The lobster way. 🦞

perfectPixel. Refine and quantize messy AI pixel art into clean, perfect pixels.

MiroFish. A Simple and Universal Swarm Intelligence Engine, Predicting Anything. 简洁通用的群体智能引擎，预测万物

IDA-NO-MCP. Say goodbye to the complex, verbose, and laggy interaction mode of IDA Pro MCP

opencode. The open source coding agent.

Android-Sword. 开源apk逆向一体化分析工具

AI-Gamble. 这是一个基于大型语言模型（LLM）的动态互动小说游戏。它能够根据玩家选择的故事类型，实时生成独特的故事情节、人物、以及一个可视化的故事发展线路图，为玩家提供一个充满未知和选择的沉浸式阅读体验。

cheatengine-mcp-bridge. Connect Cursor, Copilot & Claude AI directly to Cheat Engine via MCP. Automate reverse engineering, pointer scanning, and memory analysis using natural language.

MuMuAINovel. 一款基于 AI 的智能小说创作助手，帮助你轻松创作精彩故事

Agent-Kernel. A MicroKernel Multi-Agents System Framework for Adaptive Social Simulation Powered by LLMs

vscode. Visual Studio Code

rekall. Rekall Memory Forensic Framework

snow-shot. 超好用的截图工具

ksfinder. ksfinder - Retrieve exported kernel symbols from physical memory dumps

kallsyms-extractor. Tool to extract the kallsyms (System.map) from a memory dump

GhidraMCP. MCP Server for Ghidra

firecracker. Secure and fast microVMs for serverless computing.

LovelyERes. Linux应急响应工具

Chronos. Chinese Flyff emulator

winfsp. Windows File System Proxy - FUSE for Windows

ok-duet-night-abyss. 二重螺旋 后台副本挂机 Automation for Duet Night Abyss

qrazybox. QR Code Analysis and Recovery Toolkit

Ribir. Non-intrusive GUI framework for Rust/WASM

mcp-feedback-enhanced. Enhanced MCP server for interactive user feedback and command execution in AI-assisted development, featuring dual interface support (Web UI and Desktop Application) with intelligent environment detection and cross-platform compatibility.

pcileech. Direct Memory Access (DMA) Attack Software

BettaFish. 微舆：人人可用的多Agent舆情分析助手，打破信息茧房，还原舆情原貌，预测未来走向，辅助决策！从0实现，不依赖任何框架。

nezha. :trollface: Self-hosted, lightweight server and website monitoring and O&M tool

deepseek-ocr.rs. Rust multi‑backend OCR/VLM engine (DeepSeek‑OCR-1/2, PaddleOCR‑VL, DotsOCR) with DSQ quantization and an OpenAI‑compatible server & CLI – run locally without Python.

DeepSeek-OCR. Contexts Optical Compression

zsteg-rust. zsteg recreate by rust

marktext. 📝A simple and elegant markdown editor, available for Linux, macOS and Windows.

awesome-tauri. 🚀 Awesome Tauri Apps, Plugins and Resources

hexhub. Hexhub 是一款开源的SSH、SFTP、数据库管理客户端，数据库管理模块目前还在开发之中

arnold_decoder. 一个用于暴力破解猫变换（Arnold's Cat Map）加密图像的命令行工具。

mcp-windbg. Model Context Protocol for WinDbg.

NOPTrace-Configs. 符合 OpenForensicRules 数字取证与应急响应信息采集规则格式规范的配置文件仓库

rust-sdk. The official Rust SDK for the Model Context Protocol

Typhon. pyjail (python jail) 绕过 一把梭 CTF 工具

interactive-feedback-mcp. Interactive User Feedback MCP

ChromeKatz. Dump cookies and credentials directly from Chrome/Edge process memory

FlowSage. 一款专为 CTF 竞赛设计的智能流量分析工具，支持多协议解析与自动化 Flag 提取，助力快速解题。

Volatility3-pypykatz. pypykatz plugin for Volatility3 Framework

NirSoft. NirSoft 实用工具汉化版

VMPUnpacker. C++

pdb. A parser for Microsoft PDB (Program Database) debugging information

RustPython. A Python Interpreter written in Rust

AndroidDatabaseViewerBeta. 专为取证比赛设计的Android-Data数据库分析工具；快速解析手机镜像数据库文件，精准提取证据

pylingual. Python decompiler for modern Python versions.

10x-Tool-Calls. 10x-Tool-Calls is a lightweight rules file designed to help you maximize the value of your monthly AI coding tool calls, enabling you to get more done with fewer requests.

EtherGhost. 新一代Webshell管理器，兼容蚁剑与冰蝎的PHP webshell

system-prompts-and-models-of-ai-tools. FULL Augment Code, Claude Code, Cluely, CodeBuddy, Comet, Cursor, Devin AI, Junie, Kiro, Leap.new, Lovable, Manus, NotionAI, Orchids.app, Perplexity, Poke, Qoder, Replit, Same.dev, Trae, Traycer AI, VSCode Agent, Warp.dev, Windsurf, Xcode, Z.ai Code, Dia & v0. (And other Open Sourced) System Prompts, Internal Tools & AI Models

apk_analyzer. APK分析工具

sealos. Deploy real projects from GitHub or your AI coding agent, then keep them running with AI-powered operations.

Sirius. TypeScript

sshdHooker. One-click injection into the SSHD process to record and send the password for ssh login

fake-ssh. Program to emulate a pseudo-honeypot ssh server with some fun commands

WeClone. 🚀 One-stop solution for creating your AI twin from chat history 💡 Fine-tune LLMs with your chat logs to capture your unique style, then bind to a chatbot to bring your digital self to life.

FakeLinuxBaseLineCheck. Python

GhostWolf. 从内存中提取浏览器和Todesk用户凭证

esp-adf. Espressif Advanced Development Framework for Multimedia Applications

CyberChef. The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

Vulnerability-Wiki. 一个基于 docsify 快速部署 Awesome-POC 漏洞文档的项目。Deploying the Awesome-POC repository via docsify.

TrafficEye. This tool is designed to help penetration testers and network administrators identify potential security threats, especially those targeting web applications such as SQL injection, XSS, and WebShells. Its modular desig 该工具适用于 HW 蓝队对网络流量的深入分析，帮助安全研究人员、渗透测试人员及网络管理员等专业人士识别潜在的安全威胁，尤其是针对 Web 应用的攻击（如 SQL 注入、XSS、WebShell 等）。其模块化设计使用户能够根据实际需求自由选择并定制各类功能模块

velociraptor. Digging Deeper....

PyMemDump. Python

ImHex. 🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

maltrail. Malicious traffic detection system

habitica. A habit tracker app which treats your goals like a Role Playing Game.

A2A. Agent2Agent (A2A) is an open protocol enabling communication and interoperability between opaque agentic applications.

e0e1-config. 综合后渗透方面的杂烩

qzone-toolkit. Python

bkcrackGUI. 基于 bkcrack 的可视化压缩包明文攻击工具

ida-pro-mcp. AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

Roo-Code. Roo Code gives you a whole dev team of AI agents in your code editor.

xiaozhi-esp32-server. 本项目为xiaozhi-esp32提供后端服务，帮助您快速搭建ESP32设备控制服务器。Backend service for xiaozhi-esp32, helps you quickly build an ESP32 device control server.

chatmcp. ChatMCP is an AI chat client implementing the Model Context Protocol (MCP).

OpenManus. No fortress, purely open ground. OpenManus is Coming.

MetaGPT. 🌟 The Multi-Agent Framework: First AI Software Company, Towards Natural Language Programming

Pyarmor-Static-Unpack-1shot. ✅ No execution ✅ Pyarmor 8.0 - 9.2.x (latest) ✅ Universal ✅ Statically convert obfuscated Python scripts to disassembly and (experimentally) source code.

dify. Build Agentic workflows, RAG pipelines, with rich AI model and tool support on one collaborative workspace. Deploy on cloud, VPC, or self-hosted, so teams move from prototype to production without rebuilding the stack.

RmEye. 戎码之眼是一个window上的基于att&ck模型的威胁监控工具.有效检测常见的未知威胁与已知威胁.防守方的利剑

python-sdk. The official Python SDK for Model Context Protocol servers and clients

Forensics-MCP-Server.

FlashMLA. FlashMLA: Efficient Multi-head Latent Attention Kernels

UI-TARS-desktop. The Open-Source Multimodal AI Agent Stack: Connecting Cutting-Edge AI Models and Agent Infra

ssrf-labs. 【Hello-CTF labs】一个ssrf的综合靶场，包含RCE，SQL注入，Tomcat，Redis，MySQL提权等ssrf攻击场景

LovelyKodo. Python

openWakeWord. An open-source audio wake word (or phrase) detection framework with a focus on performance and simplicity.

MiService. XiaoMi Cloud Service for mi.com

PaddleOCR-json. OCR离线图片文字识别命令行windows程序，以JSON字符串形式输出结果，方便别的程序调用。提供各种语言API。由 PaddleOCR C++ 编译。

FittingRoom. 这是什么？女装！存一下！

DeepSeek-V3. Python

VolWeb. A centralized and enhanced memory analysis platform

SecGPT. SecGPT网络安全大模型

minimind. 🧠「大模型」2小时完全从0训练64M的小参数LLM！Train a 64M-parameter LLM from scratch in just 2h!

shellcode_loader_bypass. bypass 360,huorong,tencent,defender with Split loading technique and unhooking

docs. Documents for openvela.

fuzzDicts. You Know, For WEB Fuzzing !

FlagGenius. 革命性的CTF工具，为快速、简便而生。

puzzle_node. 网页解谜开发模板，可以通过此模板快速开发属于自己的网页解谜游戏。

Whoamifuck. 用于Linux应急响应，快速排查异常用户登录情况和入侵信息排查，准确定位溯源时间线，高效辅助还原攻击链。

MemprocFs_Symbols_To_Volatility3_Symbols. A tool for converting Windows PDB files used by MemProcfs to Volatility3 symbol files (.json.xz).

volatility3-symbols. Collection of Linux and macOS Volatility3 Intermediate Symbol Files (ISF), suitable for memory analysis 🔍

LovelyAIMaster. 可以在windows任何地方调用AI进行输入

magika. Fast and accurate AI powered file content types detection

bulk_extractor. This is the development tree. Production downloads are at:

HaE. HaE - Highlighter and Extractor, Empower ethical hacker for efficient operations. 赋能白帽，高效作战！

cimbar. color-icon-matrix barcodes. Proof of concept implementation.

better-genshin-impact. 📦BetterGI · 更好的原神 - 自动拾取 | 自动剧情 | 全自动钓鱼(AI) | 全自动七圣召唤 | 自动伐木 | 自动刷本 | 自动采集/挖矿/锄地 | 一条龙 | 全连音游 | 自动烹饪 - UI Automation Testing Tools For Genshin Impact

LoveLy-QRCode-Scanner. A script to brute force decode QR codes, mainly for decoding blurred or AI-generated QR codes that can't be scanned by WeChat.

cve-2024-4367-PoC-fixed. PDF.js是由Mozilla维护的基于JavaScript的PDF查看器。此漏洞允许攻击者在打开恶意 PDF 文件后立即执行任意 JavaScript 代码。这会影响所有 Firefox 用户 （<126），因为 Firefox 使用 PDF.js 来显示 PDF 文件，但也严重影响了许多基于 Web 和 Electron 的应用程序，这些应用程序（间接）使用 PDF.js 进行预览功能。

volatility3. Volatility 3.0 development

OpenVoice. Instant voice cloning by MIT and MyShell. Audio foundation model.

yolov10. YOLOv10: Real-Time End-to-End Object Detection [NeurIPS 2024]

SecurityProduct. 开源安全产品源码，IDS、IPS、WAF、蜜罐等

LinuxCheck. Linux应急处置/信息搜集/漏洞检测工具，支持基础配置/网络流量/任务计划/环境变量/用户信息/Services/bash/恶意文件/内核Rootkit/SSH/Webshell/挖矿文件/挖矿进程/供应链/服务器风险等13类70+项检查

AppAgent. AppAgent: Multimodal Agents as Smartphone Users, an LLM-based multimodal agent framework designed to operate smartphone apps.

LovelyMem. 基于Memprocfs和Volatility的可视化内存取证工具

supervision. We write your reusable computer vision tools. 💜

MemProcFS. MemProcFS

RegRipper3.0. RegRipper3.0

Raster-Terminator. CTF之光栅图秒杀器

Misc.

UsbKeyboard_Mouse_Hacker_Gui. 自带GUI的一键解鼠标流量/键盘流量小工具

VolatilityPro. 一款用于自动化处理内存取证的Python脚本，并提供GUI界面

Hello-CTF. 【Hello CTF】题目配套，免费开源的CTF入门教程，针对0基础新手编写，同时兼顾信息差的填补，对各阶段的CTFer都友好的开源教程，致力于CTF和网络安全的开源生态！

nonebot-plugin-chatrecorder. 适用于 Nonebot2 的聊天记录插件

nonebot2. 跨平台 Python 异步聊天机器人框架 / Asynchronous multi-platform chatbot framework written in Python

Akirabot. 基于Nonebot2的CTF辅助机器人

ntchat-client. ntchat封装无头客户端

open-im-server. IM Chat OpenClaw