bbinfosec

MLSec Application Security Testing Guide (MLASTG) — Enterprise & Defense-Grade Security Verification and Testing Standard for Machine Learning and LLM Systems

Runtime dependency-behavior monitor for Node.js. Two engines: in-process telemetry + an out-of-process (strace) trust boundary that sees native egress & persistence. Defense-in-depth for npm supply-chain attacks — SARIF, GitHub Action, zero deps.

DVAI - Damn Vulnerable AI Ecosystem. Open-source, zero-infrastructure-cost AI red team training range.

🛡️ Vaathi — India's Open Source Cybersecurity Learning OS. From zero to ethical hacker — in your language, at your pace, on your machine.

This repository is created only for infosec professionals whom work day to day basis to equip ourself with uptodate skillset, We can daily contribute daily one hour for day to day tasks and work on problem statements daily, Please contribute by providing problem statements and solutions

Multi-layer OPSEC failure analysis framework - Research-grade threat modeling and signal correlation

Centos script for hardening the operating system, It has minimalistic features will add few more during the journey.

Collection of IOS penetration test cheatsheet

Runtime token proxy + intelligence dashboard for LLM tools. Intercepts API calls, strips waste, tracks costs — for individual developers and Fortune 500 teams.

Agni EDR - Open-source EDR simulator for red teamers | AI-powered collaboration

Strategic Cyber Risk Intelligence Platform - Transform security scans into CFO-level financial impact analysis

Your AI agent has no idea it's been hijacked. AgentGuard does

Collection of links and resources which i gain daily over the AI world, It includes LLM and other visionary models on testing and other sources

A calm, local-first, bring-your-own-LLM food companion for Indian households. No servers, your data stays on your device.

Google Cloud Client Libraries for Go.

based on https://x.com/PortSwiggerRes/status/1886792856204959824?t=zRm2hVCr2UeewQSvgenERQ&s=08 just implemented bchecks for additional stuff

Red Team Server (RTS)

Various codes related to Ransomware Developement

No description.

Linux post exploitation enumeration and exploit checking tools

Files for appsecwiki.com

All credits to the owner Just cloning for safety

No description.

Structured, machine-readable corpus of 23 real-world vulnerabilities — metadata, CWE, root cause, exploit primitive & discovery methodology — distilled from public Exploitarium PoC research. For defensive/educational use.

A collection of awesome resources related AI security

A curation of awesome tools, documents and projects about LLM Security.

Cross-platform personal browser credential DLP monitor. Linux: fanotify blocking | Windows: NtQueryInfo polling. Blocks infostealers from reading cookies/passwords in real-time.

No description.

Personal portfolio - Senior Mobile Application Developer

GitHub profile

Real-time military threat intelligence platform. Telegram monitoring + AI reports + interactive map.

My personal talks across the conferences.

Runtime security fabric for AI agents. Policy-as-code governance with trust segmentation, cognitive velocity detection, behavior chain analysis, and multi-agent identity tracking.

Glasswing inspired

The Red Sun vulnerability repository

Open weight models to solve the issues with aging biomarker measurements detailed at https://x.com/nikhilyadala/status/2035920229889630486/

No description.

**GeoSentinel** is a geospatial monitoring platform that tracks global movement in real time. It aggregates ship and flight routes, live coordinates, and geodata into a unified system, providing clear geographic and geopolitical awareness for analysis, visualization, and decision-making.

Ground Station is all-in-one satellite monitoring suite

WireTapper is a wireless OSINT tool that passively detects and maps Wi-Fi, Bluetooth, CCTV cameras, vehicles, headphones, TVs, IoT devices, and cell towers, turning nearby radio signals into clear situational intelligence 📡

To explain the basics of machine learning and to keep shortnotes over it

lowai

Damn Vulnerable Web Application (DVWA)

creating copy for kodi ip tv research

A tool for glamorous shell scripts 🎀

Learn the fundamentals of cloud computing

Tutorials and Things to Do while Hunting Vulnerability.

ingraind is a security monitoring agent built around RedBPF for complex containerized environments and endpoints. The ingraind agent uses eBPF probes to provide safe and performant instrumentation for any Linux-based environment.

Resources for Windows exploit development

GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]

Penetration Testing, Vulnerability Assessment and Red Team Learning

No description.

整理渗透测试、内网渗透、爆破字典、漏洞库、代码审计、渗透测试面试题相关项目

渗透测试人员专用精简化字典 Dictionary for penetration testers happy hacker

Set of Mindmaps providing a detailed overview of the different #Windows auditing capacities and event log files.

Official OWASP Top 10 Document Repository