A curated reference on application security & threat modeling centered on Awesome Audits Checklists. Use it as a repeatable review, validation or hardening pass.

As a first main target, we are collecting C implementations that fulfill the requirements listed below. We also accept optimised implementations, but still requiring high-quality, tested code. Use it to navigate the topic and choose relevant methods, papers or tools.

Heimdall is an advanced EVM smart contract toolkit specializing in bytecode analysis and extracting information from unverified contracts. Heimdall is written in Rust and is designed to be fast, modular, and more accurate than other existing tools. Use it to navigate the topic and choose relevant methods, papers or tools.

A curated reference on forensics & reverse engineering centered on Awesome Threat Detection and Hunting. Use it as a repeatable review, validation or hardening pass.

Golang execution layer implementation of the Ethereum protocol. Automated builds are available for stable releases and the unstable master branch.

Vulnreport is a platform for managing penetration tests and generating well-formatted, actionable findings reports without the normal overhead that takes up security engineer's time. The platform is built to support automation at every stage of the process and allow customization for whatever other systems you use as part of your pentesting process.

This repository is a collection of reference implementations for the Model Context Protocol (MCP), as well as references to community-built servers and additional resources. The servers in this repository showcase the versatility and extensibility of MCP, demonstrating how it can be used to give Large Language Models (LLMs) secure, controlled access to tools and data sources.

Echidna is a weird creature that eats bugs and is highly electrosensitive (with apologies to Jacob Stanley) More seriously, Echidna is a Haskell program designed for fuzzing/property-based testing of Ethereum smart contracts. It uses sophisticated grammar-based fuzzing campaigns based on a contract ABI to falsify user-defined predicates or Solidity assertions.

reverse-skill Cybersecurity Skills Router · 逆向技能路由包 Navigate the dark waters, sail against the stream. Why this exists: PRIMARY ladder: skills/MASTER-ROUTING.md · Full matrix: skills/routing.md · Ops: skills/ops/ ( back to top ) IDA Pro · radare2 · Ghidra ( back to top ) Then refresh the tool index per platform: |----------|---------| Check skills/tool-index.md to see detected tools.

Metorial (YC F25) Open-source identity and access layer for AI agents. Connect agents to real systems with consistent auth, permissions, and observability.

liboqs ====================== liboqs is an open source C library for quantum-safe cryptographic algorithms. liboqs provides: liboqs is part of the Open Quantum Safe (OQS) project, which aims to develop and integrate into applications quantum-safe cryptography to facilitate deployment and testing in real world contexts.

This solution accelerator is an internal chatbot that interprets and understands context and direction from creative briefs to create multi-modal text and image content for marketing ad campaigns. Built on the Microsoft Agent Framework with HandoffBuilder orchestration, it uses specialized AI agents to parse briefs, research product data, generate content, and validate brand compliance.

This is not a comprehensive list and solidity is quickly evolving so please do due dilegence on your part. Not all listed items will apply to your specific smart contract.

This reference consolidates EVM opcode information from the yellow paper, stack exchange, solidity source, parity source, evm-opcode-gas-costs and Manticore. New issues and contributions are welcome, and are covered by bounties from Trail of Bits.

Augustus is a Go-based LLM vulnerability scanner for security professionals. It tests large language models against a wide range of adversarial attacks, integrates with 28 LLM providers, and produces actionable vulnerability reports.

A community-maintained collection of bugs, vulnerabilities, and exploits in apps using ZK crypto. There are two sections - Bugs in the Wild and Common Vulnerabilities.

A curated, community-driven list of awesome Model Context Protocol (MCP) servers, tools, frameworks, clients, and utilities. MCP is an open protocol that enables AI models to securely interact with local and remote resources through standardized server implementations.