Popular GitHub Repositories for Redteam

A secure sandbox environment for malware developers and red teamers to test payloads against detection mechanisms before deployment. Integrates with LLM agents via MCP for enhanced analysis capabilities.

All-in-one offensive security toolbox with AI agent and MCP architecture. Integrates tools like Nmap, Metasploit, FFUF, SQLMap. Enables pentesting, bug bounty hunting, threat hunting, and reporting. RAG-based responses with local knowledge base support.

All-in-one offensive security toolbox with AI agent and MCP architecture. Integrates tools like Nmap, Metasploit, FFUF, SQLMap. Enables pentesting, bug bounty hunting, threat hunting, and reporting. RAG-based responses with local knowledge base support.

All-in-one offensive security toolbox with AI agent and MCP architecture. Integrates tools like Nmap, Metasploit, FFUF, SQLMap. Enables pentesting, bug bounty hunting, threat hunting, and reporting. RAG-based responses with local knowledge base support.

Testing platform for covert data exfiltration techniques where sensitive documents are embedded into vector representations and tunneled out under the guise of legitimate RAG operations — bypassing traditional security controls and evading detection through semantic obfuscation.

Machine Learning Attack Series

红色团队技术集合

A knowledge source about TTPs used to target GenAI-based systems, copilots and agents

Using Just In Time (JIT) instruction decryption, this shellcode loader ensures that only the currently executing instruction is visible in memory.

OWASP EKS Goat is a deliberately vulnerable EKS cluster environment to explore AWS cloud-native security through hands-on attack and defense labs with walkthrough.

OCIGPT: GPT-4o based chat model for advanced cyber operations, digital investigations and OSINT.

???? your way into Claude 3.5’s new Computer Use API! Deploy Metasploit, automate exploits, and make Claude your AI-powered hakcer sidekick. Drink all the AI's HACK ALL THE THINGS. Shenanigans included. ?????

Building and breaking a machine learning system.

非教育用途：一个面向专业渗透测试人员的服务器，包含Nmap、Go/Dirbuster、Nikto、JtR、密码字典生成器等工具。

AgentNull is a comprehensive catalog of attack vectors targeting autonomous AI agents, complete with proof-of-concepts for each method. Explore the structured threat information and replicate scenarios using the provided resources. ???

Offensive simulation engine for RF, logs, and deception ops.

使用大型语言模型 (LLM) 进行横幅抓取 (MCP 服务器)

Prompt Engineering Tool for AI Models with cli prompt or api usage

Tactician of Role-Interchanging Cloud Keys (Effortless AWS persistence via AssumeRole).

V.I.R.A.L. (Virtual Intelligence for Reconnaissance and Attack Logistics)