authorized-testing

Netlogon and CLDAP vulnerability research with a proof of concept.

AI-powered authorized security testing workspace. Maintained on the release branch (NestJS + Ink TUI + Web/Desktop).

Secrets Find0r is a multithreaded SMB share crawler that hunts for exposed credentials and secrets across Windows networks. It enumerates shares, recursively scans files with regex/keyword rules, highlights matched tokens on screen, and exports clean ASCII tables. Supports DOCX/PDF/legacy Office and depth limits.

Advanced mobile security research platform for authorized testing and educational purposes

AI 辅助的授权渗透测试平台（基于 Ed1s0nZ/CyberStrikeAI 二次开发）：单/多智能体交战、本地近5年 CVE 语料与每日增量同步、GitHub-C2 交接、经验总结人审入库、HITL 审批与审计。

WebSource Harvester is an educational web-source harvester that crawls a site (BFS, depth-controlled), downloads browser-visible assets (HTML, CSS, JS, images, fonts, PDFs), and rewrites paths so pages work offline, including nested routes. It enforces same-origin limits and is designed for learning, offline analysis, and safe portfolio demos.

Open-source, self-hostable AppSec agent that finds, proves, and helps fix web/API vulnerabilities — evidence-first (independent validation, proof-of-exploit over CVSS lists) behind a deterministic allowlist→scope→risk→policy→audit safety pipeline. Bring your own LLM or run fully local.

Powerful Python SSH brute force tool with multi-threaded architecture, advanced honeypot detection, real-time statistics, and system reconnaissance. Perfect for authorized security testing and penetration testing.

Encoding-transformation utility for authorized testing, defensive validation and controlled lab learning.

Next-generation AI/LLM-native crawler for authorized security research. Maps the attack surface of dynamic web apps (accessibility tree, state graph, endpoint and form discovery) under a hard safety kernel, authorization records and an audit journal. Rust. Only for systems you own or are authorized to test. https://crawlx.dev/

AI 小秘 (aimy-skill) v3 · 授权范围内的侦察与 Web 漏洞检测插件 for DeepSeek Harness｜8 个原生工具 + 8 个中文技能 · 默认拒绝的授权范围护栏 · 只做检测、零运行时依赖。再开发自 zxz0119/aimy-sikll。

Credential Reuse0r is a fast, multithreaded offensive security tool for testing credential reuse across multiple network services, especially in Windows Active Directory environments.

Read-only, scope-enforced web recon and vulnerability reporting for authorized assessments. Stdlib-only engine plus the single-file datz terminal console. Free 20-day trial, Pro needs a signed licence key.

Red team reconnaissance and vulnerability-testing framework with Nuclei and Metasploit integration. For authorized engagements only.

Self-hosted AI security lab with fresh LXD workspaces and OpenCode-powered authorized testing

Stress-testing & web security recon toolkit load testing, proxy rotation, login automation, and vulnerability scanning.

A lightweight Rust CLI for authorized JWT security testing and lab use.

RTSP Brute Force Tool: A powerful utility for security testing of RTSP services through systematic credential brute forcing, designed for ethical hacking and educational purposes.

SMB Inspect0r is a fast multithreaded Python tool to scan networks for accessible SMB shares, supporting both anonymous and authenticated logins. Features include progress tracking, and detailed output of discovered shares.

Text an authorized recon from your phone. Hermes loads 818 cybersecurity playbooks and plans; every live probe waits for your yes on Latch.