Rob Ragan Claim this profile

Show CVEs that became KEVs

AI Testing Suite

Collection of Windows Hacking Binaries

Custom skins (visual themes) for Claude Code CLI

Live AI judge agent — watches hackathon demos in real-time via Gemini Live API, delivers British-accented commentary via TTS, scores with multi-model ensemble (Gemini + Claude + Groq), detects prompt injection attempts, and runs cross-team deliberation. Built for NEBULA:FOG 2026.

Easily spoof your MAC address (OS X, Windows, Linux)

WikiLeaks Vault 7 CIA Hacking Tools

Automatically exported from code.google.com/p/raft

NEBULA:FOG:PROTOCOL 2026 - AI x Security Hackathon Website

Data exfiltration PoC scripts

Automatically exported from code.google.com/p/jackyrelay

The Python Risk Identification Tool for generative AI (PyRIT) is an open access automation framework to empower security professionals and machine learning engineers to proactively find risks in their generative AI systems.

A default credential scanner.

Reconnaissance tool for GitHub organizations

Curated list of public penetration test reports released by several consulting firms and academic security groups

No description.

quickfuzz - quick service identification

No description.

Analyzing the evolution of ChatGPT's codebase through time with curated archives and scripts

GPT 2 model trained on fake PII to study PII leakage from large language models

A geolocation OSINT tool. Offers geolocation information gathering through social networking platforms.

Nishang is a framework and collection of scripts and payloads which enables usage of PowerShell for offensive security and post exploitation during penetration tests.

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.

Electron based screenshot scanner

A python script that sniffs cookies from the network, and outputs Javascript code that can be used to inject the cookies into any browser.

A collection of MCP servers.

No description.

No description.

A curated list of awesome Claude Skills, resources, and tools for customizing Claude AI workflows

A curated list of awesome tools, IDE integrations, frameworks, and other resources for developers working with Anthropic's Claude Code.

The most comprehensive toolkit for Claude Code -- 135 agents, 35 curated skills (+400,000 via SkillKit), 42 commands, 176+ plugins, 20 hooks, 15 rules, 7 templates, 14 MCP configs, 26 companion apps, 52 ecosystem entries, and more.

A curated list of awesome skills, hooks, slash-commands, agent orchestrators, applications, and plugins for Claude Code by Anthropic

A horizontal and vertical web content enumerator

Starlog — Curated Intelligence on AI Agents & Offensive Security Tools

✨ Open-source AI hackers for your apps 👨🏻‍💻

AI agent for autonomous cyber operations

Real-time face swap for PC streaming or video calls

Lightweight LLM Interaction Framework

A demo application using fal.realtime and the lightning fast SDXL API provided by fal

Spaghetti - Web Application Security Scanner

Open Red Team Bag of Tricks - Red Teaming and Pentesting cheat sheet and trick book

BigQuery based rainbow tables

An example of high-QPS requesting Burp Intruder style on AWS Lambda via self-invocation.

Domain name permutation engine for detecting typo squatting, phishing and corporate espionage

Pathbrute

A `.git` folder disclosure exploit

Take a list of domains and probe for working HTTP and HTTPS servers

Phishing catcher using Certstream

Crack and decrypt BLE encryption

a ruggedization framework that embodies the principle "be mean to your code"

Simple yet powerful authorization / authentication client library for Python web applications.

Build agents that monitor and act on your behalf. Your agents are standing by!

Certificate Transparency Log Monitor

Various public documents, whitepapers and articles about APT campaigns

Platform for Architecture-Neutral Dynamic Analysis

STUNning Exfil Techniques

take domains from STDIN, dump out dmarc policy.

Perform the same request against two HTTP servers and diff the results

Incident Response Methodologies

EncFS: an Encrypted Filesystem for FUSE.

Android Mobile Security Suite

A Chrome Extension to help protect against phishing attacks.

netgrafio - Visualize your network

This Powershell script will generate a malicious Microsoft Office document with a specified payload and persistence method.

This is a webshell open source project

A tool to exploit .NET Remoting Services

ID-spoofing NFS client

PowerUp is a powershell tool to assist with windows local privilege escalation.

Website Fingerprinter

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

Veil-Pillage is a post-exploitation framework that integrates with Veil-Evasion.

Your last stop for password list generation needs!

No description.

Kippo - SSH Honeypot

Webkit based scriptable web browser for python.

Web based console - for presentations and workshops

scanner detecting the use of JavaScript libraries with known vulnerabilities

Collection of Scripts written to Solve/Crack Audio reCapcha Challenges

Simple chat program using inaudible sounds and a computer's microphone and speaker.

The base classes that are used by Metafid (a private piece of software that generates web bot code from Fiddler archives)

Watchtower is a Static Code Analysis tool designed to assist security auditors who are tasked with performing manual code reviews. It is platform- and language-agnostic.

No description.

No description.

Finds public elite anonymity proxies and concurrently tests them

Seed recovery tool for PRNGs

No description.

Simple Python style checker in one Python file

Local File Inclusion Exploitation Tool

No description.

Common User Passwords Profiler (CUPP)

Web security concept of CaptchaJacking Proof of Concept Code

Python Shamir Secret Sharing Scheme

Random scripts to hookup with

Netdiff is a tool to scan for differences in a network block (new IPs, new ports, new certificates)

SecLists is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

The Anti-Anti-Automation Framework

Generates and changes MAC Addresses for both OS X and Linux. Allows the generation of both random and MAC Addresses from a given manufacturer.

A Mobile Tor Relay and Bridge Monitoring Application

tool and python module to manipulate tor hidden services