为什么值得关注

涵盖传统安全与AI/大语言模型安全领域的经过实战检验的全面武器库，拥有活跃的社区贡献和清晰的分类。

适合谁使用

渗透测试人员和红队成员
蓝队和DevSecOps工程师
漏洞赏金猎人
AI安全研究人员

典型使用场景

进行授权的渗透测试和漏洞评估
执行侦察和攻击面映射
测试AI/大语言模型应用中的提示注入等漏洞
通过 adversary emulation 构建和验证安全检测

项目优势

精心挑选的30多个类别的经实战检验的工具
包含专门的AI/大语言模型安全工具和框架部分
社区驱动，欢迎PR，采用MIT许可证
覆盖从侦察到后渗透及防御的完整范围

使用前须知

质量取决于持续的社区贡献和工具维护
可能无法涵盖所有专业或小众安全领域
用户必须确保合法授权，因为工具若被误用可能造成危险

README 快速开始

⚔️ Awesome Cyber & AI Arsenal

A curated, battle‑tested collection of offensive, defensive and AI‑powered security tools.

Everything is split into 🔴 Offensive (Red Team), 🔵 Defensive (Blue Team) and 🤖 AI / LLM Security, with sane sub‑categories so you can find the right tool in seconds.

[!WARNING] For authorized security testing and education only. Every tool listed here must be used only against systems you own or have explicit written permission to test. Unauthorized access is illegal. See the Disclaimer.

📑 Table of Contents

项目描述

A curated collection of offensive, defensive and AI/LLM security tools.

相关仓库与替代方案

根据分类、Topic 和编程语言匹配的相似项目。

deerwork-ai

精选

deer-workflow

An open-source Dynamic Workflow runtime that combines deterministic TypeScript orchestration with replaceable Agent runtimes.

AI 与机器学习大语言模型

312

amitshekhariitbhu

精选

ai-agents-tutorial

A comprehensive step-by-step tutorial series that teaches AI agents from scratch, covering function calling, agent loops, ReAct, reflection, plan-and-execute, multi-agent systems, orchestration, evaluation, and related concepts like RAG, GraphRAG, and LangChain.

AI 与机器学习大语言模型

136

OneInterface

精选

stormy-cookbook

Stormy Cookbook provides copy-pasteable recipes for using the Stormy Social Data API and MCP server, which offers a unified REST API and MCP tools to search profiles, posts, and emails across TikTok, YouTube, Instagram, LinkedIn, X, and Reddit through a single HTTP contract.

AI 与机器学习大语言模型