deerwork-ai
Featured
deer-workflow
An open-source Dynamic Workflow runtime that combines deterministic TypeScript orchestration with replaceable Agent runtimes.
AI repository intelligence
FR-AI / ANALYSISWhy it is worth attention
Comprehensive battle-tested arsenal covering both traditional and AI/LLM security domains, with active community contributions and clear categorization.
Who it is for
- Penetration testers and red teamers
- Blue team and DevSecOps engineers
- Bug bounty hunters
- AI security researchers
Use cases
- Conducting authorized penetration testing and vulnerability assessments
- Performing reconnaissance and attack surface mapping
- Testing AI/LLM applications for prompt injection and other vulnerabilities
- Building and validating security detections with adversary emulation
Strengths
- Curated selection of battle-tested tools across 30+ categories
- Includes dedicated sections for AI/LLM security tools and frameworks
- Community-driven with PRs welcome and MIT license
- Covers full spectrum from recon to post-exploitation and defense
Considerations
- Quality depends on ongoing community contributions and tool maintenance
- May not cover every specialized or niche security domain
- User must ensure legal authorization as tools can be dangerous if misused
README quick start
⚔️ Awesome Cyber & AI Arsenal
A curated, battle‑tested collection of offensive, defensive and AI‑powered security tools.
Everything is split into 🔴 Offensive (Red Team), 🔵 Defensive (Blue Team) and 🤖 AI / LLM Security, with sane sub‑categories so you can find the right tool in seconds.
[!WARNING] For authorized security testing and education only. Every tool listed here must be used only against systems you own or have explicit written permission to test. Unauthorized access is illegal. See the Disclaimer.
📑 Table of Contents
- 🔴 Offensive Security (Red Team)
- Reconnaissance — Subdomain / DNS / ASN
- Port Scanning & Network
- HTTP Probing / Crawling / Content Discovery
- JavaScript Analysis & Parameter Discovery
- Fuzzing
- Vulnerability Scanners (Web / App)
- Injection — SQL / NoSQL / Command / SSTI / LFI
- XSS
- Prototype Pollution / Open Redirect / CRLF
- SSRF / Request Smuggling / Web Cache
- GraphQL / API
- CMS / WordPress
- Auth / JWT / Password Cracking
- Deserialization / RMI / XXE
- 403 / 401 Bypass
- C2 / Exploitation / Post-Exploitation
- Out-of-Band (OOB) Interaction
- 🔵 Defensive Security (Blue Team / DevSecOps)
- 🤖 AI / LLM Security
- [AI-Powered Offensive Agents](#ai-po
Description
A curated collection of offensive, defensive and AI/LLM security tools.
Related repositories
Similar projects matched by category, topics, and programming language.
amitshekhariitbhu
Featured
ai-agents-tutorial
A comprehensive step-by-step tutorial series that teaches AI agents from scratch, covering function calling, agent loops, ReAct, reflection, plan-and-execute, multi-agent systems, orchestration, evaluation, and related concepts like RAG, GraphRAG, and LangChain.
OneInterface
Featured
stormy-cookbook
Stormy Cookbook provides copy-pasteable recipes for using the Stormy Social Data API and MCP server, which offers a unified REST API and MCP tools to search profiles, posts, and emails across TikTok, YouTube, Instagram, LinkedIn, X, and Reddit through a single HTTP contract.