Resources

Tools, labs & frameworks

A curated directory of the field's security tools, deliberately-vulnerable labs, AI security frameworks, held-out benchmarks, and open-weight security models — each chosen deliberately and linked to its source, for authorized security work.

354 curated resources · linked to source

What do you want to do?

Practice safely on a vulnerable app Scan or recon a target I'm authorized to test Automate an assessment with an AI agent Measure a model's security ability Run a security model Look something up

Browse by kind

Tools104Scanners, crawlers, and probes — grouped by the phase of an assessment.Frameworks & agents54AI-driven and multi-agent security frameworks to study or run.Labs & practice targets115Deliberately-vulnerable apps to practice on — in an environment you control.Benchmarks12Held-out evaluations that measure real security capability.Security models8Open-weight security-specialist LLMs — several served right here.References61Indexes, wordlists, and lookups — linked to their upstream sources.

By topic

The subjects this directory has most depth in — each one spans several kinds.

web-app49 claude-code29 recon28 agent-skills23 llm21 ai-agent20 bug-bounty20 ai-security13 pentest13 prompt-injection12

By vulnerability class

One topic, across kinds — a lab to practice it, the tool that finds it, the benchmark that measures it.

sqli xss ssrf xxe idor graphql jwt ssti

Everything here links to its upstream source. We host no raw payloads. Test only systems you own or are explicitly authorized to test.