Skip to content

73 results for “Ollama”

ListGrid
What you seeeverything
RecentOldestAddedA–Z
All types73Repos48Articles9Write-ups7Threads4
Papers2Other1Talks1Tools1
“Ollama”
decrypt.coarticle🧠 AI

How to Run an AI Model Locally—And Why You Might Want To

Decrypt guide to running open-weight AI models locally with Ollama and LM Studio. It cites Epoch AI's finding that open models trail the best closed ones by about four months, and sets out VRAM and unified-memory needs (8GB minimum, 24GB for serious use), quantization, licences (MIT, Apache 2.0), install commands and Gemma 4 download sizes. It also notes that the largest open models, such as Qwen3.8-Max, exceed consumer hardware.

OllamaLM StudioHugging Face+7
DecryptEpoch AIGemma 4+11

inference, models· Published and added 1 Nov 2026

github.comrepo🧠 AI

rikugan: LLM reverse-engineering agent for IDA Pro and Binary Ninja

Rikugan is a reverse-engineering agent that runs inside IDA Pro and Binary Ninja. It has its own generator-based agent loop, context management, plan mode and 60+ tools, and does not depend on an external MCP server. An orchestrator spawns parallel subagents to analyze a binary. It supports Anthropic, Gemini, MiniMax, Kimi, OpenAI-compatible endpoints and Ollama, with per-model notes.

IDA ProBinary NinjaHex-Rays+6
RikuganClaude Opus 4.6Claude Sonnet 4.6+6

agents, coding-agents· Added 30 Oct 2026

github.comrepo🛡️ Security

rikugan: LLM reverse-engineering agent for IDA Pro and Binary Ninja

Rikugan is an open-source reverse-engineering agent that runs inside IDA Pro 9.0+ and Binary Ninja, with its own agent loop instead of an MCP server. It has 60+ tools (decompiler, xrefs, strings, types, IL/microcode), parallel subagent exploration, an experimental /modify natural-language patching command and an experimental Binary Ninja deobfuscation skill for control flow flattening and opaque predicates. It supports Claude, Gemini, MiniMax, Kimi, OpenAI-compatible endpoints and Ollama.

IDA ProBinary NinjaLLM+3
control flow flatteningopaque predicatesMBA expressions+1

Malware & RE, AI Security· Added 30 Oct 2026

huggingface.coarticle🧠 AI

Introducing AnySpeechRecognizer and AnyDecisionModel: Open Models for Speech and Decisions on Apple Platforms

AnySpeechRecognizer and AnyDecisionModel are two Swift packages from Hugging Face. The first mirrors Apple's SpeechAnalyzer API with swappable engines (NVIDIA Parakeet, Alibaba Qwen3-ASR on Core ML) and adds Sortformer speaker diarization. The second returns typed yes/no, choice and score answers with probabilities via MLX, Core AI, llama.cpp, Jev or Ollama. The post gives M4 Max timings, model sizes and calibration options.

SwiftCore MLMLX+10
AnySpeechRecognizerAnyDecisionModelAnyLanguageModel+17

multimodal, inference, models· Published and added 29 Oct 2026

hackers-arise.comarticle🛡️ Security

Pentesting: Twelve Caesars – Community Tools for Offensive Security

Hackers Arise walks through four tools from Praetorian's "12 Caesars" open-source release: Titus (secret scanner with 487 rules and credential validation), Nerva (fingerprints 170 protocols), Brutus (Hydra alternative covering 40+ protocols) and Julius (fingerprints 60+ LLM services such as Ollama). It shows download and run commands in a Kali lab and how the tools chain together. The tools are Go single binaries; the post notes an exposed Ollama on port 11434 allows unauthenticated model use.

GoKali LinuxOllama+3
Praetorian12 CaesarsTitus+4

Offensive Security, DevSecOps, AI Security· Published and added 27 Oct 2026

latent.spacewriteup🧠 AI

Coding From the Himalayas With an Offline AI Agent

Walkthrough of running OpenCode against Qwen3.5 9B served by Ollama on a Mac, with Wi-Fi switched off. The author fixes a one-line accumulation bug in an expense calculator and confirms all five unittest tests pass. It covers the opencode.json setup, memory budgeting, permission prompts and a pytest-versus-unittest detour. Two further exercises (CSV report, log analyzer) were not yet run offline.

OpenCodeOllamaQwen3.5+4
QwenThomson ReutersLatent Space+4

coding-agents, inference· Published and added 27 Oct 2026

x.comthread🧠 AI

Akash Rajagopal (@akashsairaja) on X

Ollama overview thread by Akash Rajagopal on X. It lists six steps: install on macOS, Linux, Windows or Docker; run `ollama run gemma4`; use the REST API on localhost:11434 (/api/chat); call it from ollama-python and ollama-js; llama.cpp as the README's supported backend; and `ollama launch claude` to connect Claude Code. Codex, OpenCode, Copilot CLI and Droid also work. The thread cites 184k GitHub stars and an MIT licence.

Ollamallama.cppClaude Code+10
Gemma 4Akash Rajagopal

inference, coding-agents· Added 27 Oct 2026, published 26 Oct 2026

hackers-arise.comarticle🛡️ Security

Artificial Intelligence (AI) in Cybersecurity, Part 30: Shannon – AI Pentester for Web Apps and APIs

Shannon is a white-box AI pentester (@keygraph/shannon) that analyzes an application's source code, then attacks the running instance and reports only findings with a working PoC. The Hackers Arise tutorial runs it against OWASP Juice Shop in Docker on Kali, using OpenRouter (free Nemotron) and local Ollama (Qwen 2.5 Coder 7B) via a models.json file. Output includes PDF, Markdown, JSON and SARIF reports.

ShannonOpenRouterOllama+3
Juice ShopNemotronKeygraph

AI Security, AppSec, Offensive Security· Published and added 26 Oct 2026

x.comthread🧠 AI

Big Bull (@BIGBULLapp) on X

5ire is a desktop AI assistant and MCP client that connects to OpenAI, Anthropic, Google, Mistral, Grok, DeepSeek and Ollama from one window. It has a local knowledge base and tool calls over Model Context Protocol. The tools feature needs Python, Node and uv installed because it runs a local MCP server; without them it works only as a chat client.

Model Context ProtocolPythonNode.js+3
5ireOpenAIAnthropic+4

mcp, llm-apps· Added 25 Oct 2026, published 24 Oct 2026

github.comrepo🧠 AI

Show HN: Omnara – Open-source alternative to Claude Managed Agents

Omnara is an open-source, self-hostable managed agent platform, an alternative to Claude Managed Agents and OpenAI's Agents API. It runs agents on any model (OpenAI, Anthropic, OpenRouter, Bedrock, LiteLLM, Ollama) and any machine, with Postgres-backed durable state, stateless workers, per-tool permissions, MCP, skills, memory, subagents, schedules and Slack, Discord and GitHub triggers. It ships a REST API, TypeScript SDK, CLI and Docker Compose setup.

Model Context ProtocolTypeScriptNode.js+14
OmnaraClaude Managed AgentsOpenAI+2

agents, ai-infra, mcp· Added 23 Oct 2026, published 21 Oct 2026

hackers-arise.comarticle🛡️ Security

Digital Forensics: Analyzing Systems with Live-Forensicator

Live-Forensicator is a cross-platform (Windows, Linux, macOS) live response toolkit built around Forensicator.ps1. The Hackers Arise walkthrough runs it on Windows with case details, then reads the HTML report: event log summary (Event IDs 4624, 4798, 4799, 4688) and a risk rating. It also shows optional AI analysis through Ollama with a Mistral model, configured in config.json, and warns that the tool triggers AV and that AI slows runs.

PowerShellWindowsOllama+2
Live-ForensicatorForensicator.ps1WinPmem+7

Blue Team & Detection, Learning· Published and added 20 Oct 2026

huggingface.coarticle🧠 AI

AnyLanguageModel 1.0: One Year of Local Models on Apple Platforms

AnyLanguageModel 1.0 is a Swift package that gives apps Apple's Foundation Models API across the system model, llama.cpp, MLX, Core ML and hosted providers. This release post covers tool calling and guided generation on every provider, image input, and hosted support for OpenAI, Anthropic, Gemini, Ollama and Hugging Face Inference Providers. It also ships swift-huggingface 1.0 and swift-xet 1.0, and lists small open-weight models that fit on iPhone and Mac.

SwiftFoundation ModelsMLX+11
AnyLanguageModelswift-huggingfaceswift-xet+11

inference, llm-apps, mcp· Published and added 20 Oct 2026

arxiv.orgpaper🛡️ Security

Concerns in Benchmarking Jailbreaks: An Empirical Study of Attack Success Rates

This arXiv paper tests eight jailbreak attacks against three open-weight language models under three evaluation procedures. Low-resource language attacks score 96.0% mean ASR under keyword matching but 2.7% under a Qwen3 judge using StrongREJECT instructions. At Ollama's default temperature of 0.8, 100 samples of an unchanged request give 100% ASR by keywords and 50% by the judge. The authors recommend explicit success definitions, matched response budgets, validated evaluators and cumulative-failure reporting.

OllamaQwenLLM
StrongREJECTDeepInceptionattack success rate+1

AI Security· Added 21 Oct 2026, published 19 Oct 2026

arxiv.orgpaper🧠 AI

Concerns in Benchmarking Jailbreaks: An Empirical Study of Attack Success Rates

Concerns in Benchmarking Jailbreaks is an October 2026 arXiv study of eight jailbreak attacks on three open-weight models under three evaluation procedures. Low-resource language attacks score 96.0% ASR by keyword matching but 2.7% under a Qwen3 evaluator using StrongREJECT instructions. Attack rankings flip with attempt budgets, and 100 samples at Ollama's default temperature 0.8 give 100% ASR by keywords, 50% by the evaluator.

OllamaQwen3LLM
StrongREJECTDeepInceptionarXiv

evals, ai-safety, research· Added 21 Oct 2026, published 19 Oct 2026

x.comrepo🧠 AI

Saylor (@Kev96790724) on X

G-Krusch is an MIT-licensed, local-first Google Workspace hub built on Node.js 22 and SQLite WAL. It runs a 12-tool MCP server (SSE and Stdio) plus a REST bridge on port 5446 for Drive, Calendar and Gmail. It includes a 1,024-dimension hybrid Drive RAG with an embedding cascade (Ollama bge-large, then Gemini, then offline fallback) and FTS5 BM25. PDF extraction returns page citations. Tokens are kept in an AES-256-GCM vault; 30 of 30 tests pass.

Model Context ProtocolNode.jsSQLite+5
G-KruschKrusch CompanionKruschNexus+1

mcp, llm-apps, coding-agents· Added 21 Oct 2026, published 19 Oct 2026

hackers-arise.comwriteup🛡️ Security

Artificial Intelligence (AI) in Cybersecurity, Part 28: Using ADStrike to Compromise Active Directory

ADStrike is an Active Directory attack framework with 52 attack modules and configurable OPSEC levels. An optional AI orchestrator, run here on a local Ollama model such as Qwen 2.5-coder 7b, picks the next tool from each step's output. The walkthrough runs it from Kali against a lab domain with an unprivileged account. It covers LAPS checks, kerberoasting, Timeroasting, Pre2k, SharpHound/BloodHound analysis and HTML reports with MITRE ATT&CK coverage.

ADStrikeActive DirectoryOllama+3
kerberoastingTimeroastingPre2k+3

Offensive Security, AI Security· Published and added 12 Oct 2026

github.comrepo🧠 AI

Show HN: Apogee: Rebuilding Mozilla's Orbit, fully local and private

Apogee is a privacy-first browser extension (Chrome/Firefox) that summarizes articles, YouTube/Bilibili videos, PDFs, DOCX and pasted text entirely on-device, inspired by Mozilla's discontinued Orbit. It runs models via WebGPU or WebAssembly in the browser, or connects over loopback to a local Ollama or llama.cpp server, with local passage retrieval for Q&A, grounded sentence highlighting, and Opus-MT translation. It shows a practical no-backend, no-API-key architecture for local LLM apps, with a Node.js extractor test harness for contributors.

WebGPUWebAssemblyOllama+4
ApogeeMozillaOrbit+2

inference, llm-apps· Published and added 9 Oct 2026

github.comrepo🧠 AI

Microsoft Agent Framework python-1.20.0 release

Release notes for python-1.20.0 of Microsoft's Agent Framework, an open-source agent/workflow orchestration library. This release adds native vector-store connectors for DuckDB, SQL Server and MongoDB plus a TypeSafe AI connector, redesigns Foundry hosting around request-scoped agent factories and sandbox-isolated sessions, adds computer-use support to Responses clients, and ships Magentic manager and handoff-routing improvements for multi-agent orchestrations alongside a large batch of MCP, Bedrock, Gemini, Anthropic and Ollama provider fixes.

Model Context ProtocolPythonDocker+7
MicrosoftMicrosoft Agent FrameworkDuckDB+4

agents· Added 6 Oct 2026

github.comrepo🧠 AI

Bifrost (Maxim AI) — open-source LLM gateway

Bifrost is an open-source, high-performance LLM gateway (by Maxim AI) that exposes a single OpenAI-compatible API across 23+ providers including OpenAI, Anthropic, AWS Bedrock, Google Vertex, Azure, Cohere, Mistral, and Ollama. It provides automatic failover, load balancing, semantic caching, Model Context Protocol (MCP) tool integration, budget and governance controls, OIDC user provisioning, and Prometheus-based observability, deployable via npx or Docker with claimed sub-15 microsecond overhead at 5,000 RPS. It is positioned as a drop-in replacement requiring only a base-URL change for existing OpenAI, Anthropic, or GenAI SDK code.

DockerGoModel Context Protocol+4
Maxim AI

ai-infra, mcp· Added 2 Oct 2026

bankless.comarticle🧠 AI

Ethereum Foundation Launches zkAPI for Private AI Payments

The Ethereum Foundation and the Open Anonymity Project launched zkAPI, a system that lets users prepay into an on-chain USDC vault and then generate zero-knowledge proofs to unlock short-lived, spend-capped API keys for AI models (and other metered services) without tying usage back to a billing identity. It ships a local client that mimics the OpenAI and Ollama APIs so existing apps can switch to account-free access with minimal changes, plus an in-browser client called OA Chat; funds remain withdrawable on-chain even if zkAPI's own servers go down. The design, originally sketched by Davide Crapis and Vitalik Buterin on Ethereum Research, still leaves IP address and prompt content visible to providers, so the team recommends Tor for stronger privacy.

EthereumOpenAI APIOllama+1
Ethereum FoundationOpen Anonymity ProjectDavide Crapis+4

ai-infra· Published and added 2 Oct 2026

blog.ethereum.orgarticle🧠 AI

Introducing zkAPI: private usage credits for any API

zkAPI, built by the Open Anonymity Project with the Ethereum Foundation, separates payment from identity for metered APIs, with AI inference first. Users deposit credits into an Ethereum vault contract and spend them as private notes. Groth16 proofs on BN254, Poseidon hashing, a 32-level Merkle tree and nullifiers authorize spends. The server mints short-lived, dollar-capped API keys, and signed usage receipts settle the metered amount. A local client exposes standard OpenAI and Ollama APIs, so existing apps work unchanged. The post also covers a proxy mode and the limits: network metadata and prompt-content fingerprinting can still link sessions.

EthereumOpenAI APIOllama+4
zkAPIOpen Anonymity ProjectEthereum Foundation+3

ai-infra, llm-apps· Published and added 1 Oct 2026

github.comrepo🛡️ Security

Sift — Open-Source Secrets/Credential Scanner

Sift is Stratus Security's open-source successor to Snaffler: a Native AOT credential/secrets scanner for pentesters that crawls local drives, SMB shares/subnets, Active Directory, SharePoint/OneDrive/Teams, Slack, and Jira/Confluence for exposed secrets. It supports Kerberos/NTLM/pass-the-hash authentication, resumable checkpointed scans, a JSON rule/ignore-rule system compatible with Snaffler's detection catalogue, and optional local-LLM (Ollama) validation to cut false positives without sending sensitive findings to a cloud API.

.NETActive DirectoryMicrosoft 365+3
Snaffler

Offensive Security· Added 30 Sep 2026

github.comrepo🛡️ Security

garak v0.17.0 — LLM vulnerability scanner release

Release notes for garak v0.17.0, NVIDIA's open-source LLM vulnerability scanner used for red-teaming and probing models for jailbreaks, prompt injection, data leakage and other failure modes. The release adds an EU AI Act risk-category mapping to tag and group probe results, plus fixes to detectors (agent_breaker judge verdict validation, packagehallucination import parsing, MarkdownExfilContent divide-by-zero, TriggerListDetector alignment) and probes (badchars ASCII selection, Markdown exfiltration link templates), along with Ollama generator improvements and dropped Python 3.10 support in favor of 3.13.

OllamaPython
EU AI ActAgentBreakerIntentProbe+2

AI Security· Added 29 Sep 2026

github.comrepo🛡️ Security

garak v0.17.0 — adds EU AI Act risk-category mapping

garak is NVIDIA's open-source LLM vulnerability scanner that runs probes/detectors for jailbreaks, prompt injection, PII leakage, package hallucination, markdown exfiltration and more against LLM targets. This v0.17.0 release adds a new EU AI Act risk-category mapping to tag and group probe results by the Act's risk categories, alongside fixes to the agent_breaker judge, markdown-exfiltration detectors, Ollama auth/generation support, and dropped Python 3.10 in favor of 3.13 support.

garakOllamaAWS Bedrock+2
EU AI Act

AI Security· Added 26 Sep 2026

github.comrepo🛡️ Security

DVLAA

DVLAA (Damn Vulnerable LLM and Agent Application) is a self-hosted, Docker-deployable security training range for LLM and agent applications, modeled on the DVWA concept but for AI. It covers OWASP LLM Top 10 and Agent Security Top 10 risks (prompt injection, RAG poisoning, tool abuse, memory poisoning, excessive resource consumption, etc.) through 81 hands-on challenges, including an "AWDP" attack/defense track where 10 challenges reproduce real disclosed vulnerabilities in Dify, RAGFlow, Langflow, Flowise, Open WebUI and n8n (with optional real upstream container reproduction), 20 challenges adapted from a China–ASEAN AI security CTF, and 6 challenges adapted from a real model-poisoning CTF. It provides real model interaction, state-machine flag verification, source/prompt viewers, model management (local, Ollama, SiliconFlow, OpenAI-compatible), and bilingual UI.

DifyRAGFlowLangflow+3
OWASP Top 10 for LLM ApplicationsOWASP Top 10 for Agentic Applications

AI Security, Learning· Added 22 Sep 2026

github.comrepo🛡️ Security

Lonkero — Rust web vulnerability scanner (v3.7, AI agent mode)

Lonkero is an open-source Rust web vulnerability scanner (v3.7) combining 125+ context-aware scanners with an AI agent mode that drives targeted scans via natural-language conversation (using Claude, GPT, or local Ollama models). Notable techniques include a browser-free "proof-based" XSS engine that mathematically proves exploitability from reflection context + escape behavior, an "OOBZero" engine for detecting blind SQLi/SSRF/XXE via Bayesian multi-channel statistical inference and Pearson-correlated timing attacks without external callback infrastructure, Next.js middleware-bypass detection (CVE-2025-29927, CVE-2024-34351), AWS Cognito user-enumeration checks, and a scanner module that detects invisible prompt-injection payloads hidden in README.md files targeting AI coding assistants.

RustClaudeOllama+3
CVE-2025-29927CVE-2024-34351CVE-2023-23752+6

AppSec, AI Security, Offensive Security· Added 21 Sep 2026

github.comrepo🛡️ Security

awarexone/Agentic-Bug-Hunter

Agentic-Bug-Hunter is an open-source CLI (bughunter) and Claude Code plugin that automates the bug bounty pipeline end-to-end: recon, vulnerability hunting across 26 web2 and 10 web3/smart-contract bug classes, a "7-Question Gate" validation step to kill weak findings, and submission-ready report generation for HackerOne, Bugcrowd, Intigriti, and Immunefi. It orchestrates existing scanners (subfinder, httpx, nuclei, katana, ffuf, dalfox) behind a multi-provider LLM layer (Ollama, Groq, DeepSeek, Claude, OpenAI) and cross-session "hunt memory," and also ships an MCP server for use from Cursor, Codex, or OpenCode.

Claude CodeModel Context ProtocolOllama+3
BugcrowdIntigritiImmunefi+2

Offensive Security, AI Security, AppSec· Added 21 Sep 2026

github.comrepo🧠 AI

AnotiaWang/awesome-decision-models

A community-maintained GitHub list cataloging "decision models" (also called System One models): small/fast models that take a state plus caller-declared questions (Noul/true-false, Choice/multi-option, Score/rubric) and return a probability per answer in one forward pass, rather than generating text. It tracks the originating TypeSafe AI Jev model and its /v1/systemone API alongside competing hosted models (Upstage Solar Decide, Liquid AI's d1, OpenAI's Decisions API, Inception's Mercury Decide, Respan's Span-01), dozens of open-weight fine-tunes (Cloudflare's Clef, Perplexity's pplx-decider, AWS Strands Decider, Together AI's Tev1, and many Qwen3.5-based community models), zero-training logit-reading approaches, local runtimes (Ollama, Ollaya, llama.cpp-based servers), SDKs across a dozen languages, and a very long list of agent/coding-tool/MCP integrations (browser agents, code review, routing, game-playing demos) that use these models for fast, typed, in-the-loop decisions. The page is truncated at 40k of ~51k characters, so later sections (further toys, demos, and possibly benchmarks) are not reflected here.

Qwen3.5Qwen3.8-27Bllama.cpp+15
TypeSafe AIJevJevBench+33

models, mcp, agents· Added 2 Oct 2026, published 17 Sep 2026

github.comrepo🛡️ Security

RepoGuardBench

RepoGuardBench is a benchmark and accompanying paper that measures whether local open-weight coding agents (Qwen2.5-Coder 1.5B-14B via Ollama) stay on the bug-fix task when repository artifacts — README files, issue text, code comments, test logs, and agent-rule files — carry inert prompt-injection instructions. It evaluates five lightweight context- and action-level defenses (D0-D5, including a path-only action gate) across seven metrics in a sandboxed task workspace, finding no statistically clear utility winner among them. The project ships a deterministic no-GPU smoke test, paper-claim verification scripts, and reproducible tables/figures under MIT (code) and CC BY 4.0 (data) licenses.

QwenOllamaClaude

AI Security· Added 22 Sep 2026, published 13 Sep 2026

adversa.aiarticle🛡️ Security

Top GenAI security resources — September 2026

Adversa AI's September 2026 roundup of 15 GenAI security resources, grouped by attack technique, defense, threat modeling, red teaming, and training. Highlights include the OWASP LLM Top 10 2026 update (now blending 75% expert consensus with 25% incident data from 6,639 vulnerabilities, with eight of ten entries moving and System Prompt Leakage renamed Hidden Context Exposure), a memory-safety audit finding 10 vulnerabilities (including two use-after-frees at CVSS 9.2/8.1) in the C/C++ inference engine underlying Ollama, LM Studio, Jan and GPT4All, and research on stealing reasoning traces from proprietary LLM APIs, RAG document poisoning, and attention-collapse-based poisoning detection (D-SCAN).

LLMOllamallama.cpp+2
OWASP Top 10 for LLM ApplicationsNIST AI 600-1IDOR+4

AI Security· Added 7 Oct 2026, published 9 Sep 2026

github.comrepo🧠 AI

iamzulx/crypto-rag

crypto-rag is an Indonesian-language CLI crypto assistant that pairs a static knowledge-base RAG pipeline with live market data tool calls, built on the principle that volatile numbers (price, funding rate, TVL, sentiment) must never be embedded in the vector store since they go stale instantly. It implements hybrid retrieval (BM25 keyword search + FAISS dense embeddings fused via Reciprocal Rank Fusion) over a 146-topic knowledge corpus, an optional cross-encoder reranker, and an intent router that dispatches price/derivatives/on-chain/sentiment queries to live sources (Binance, DefiLlama, Fear & Greed Index) versus concept questions to the corpus. A tool-calling agent handles multi-step queries, and an OpenAI-compatible LLM synthesis layer (works with StepFun, OpenAI, Groq, LM Studio, Ollama) grounds answers with citations and falls back to extractive answers when no LLM is configured.

FAISSBM25Python+2
BinanceOKXBybit+14

llm-apps, agents· Added 2 Oct 2026, published 5 Sep 2026

github.comrepo🧠 AI

rollroyces/py-idp

py-idp is a Python framework for intelligent document processing with a six-stage pipeline (parse, classify, extract, assess, validate, human review). It supports 23 LLM backends including OpenAI, Anthropic, Ollama, and self-hosted Nanonets-OCR2-3B. It adds Pydantic schema extraction, auto-chunking of oversized documents, an eval harness, and a review-driven policy update for confidence. It is dual-licensed AGPL-3.0 and commercial.

PythonPydanticFastAPI+11
Nanonets-OCR2-3BAnthropicOpenAI+6

llm-apps, ai-infra, evals· Added 23 Oct 2026, published 31 Aug 2026

github.comrepo🛡️ Security

galyarder-security

galyarder-security (formerly Shannon Proxy) is a Docker/Temporal-based auditing layer that intercepts model SDK calls (Anthropic, Groq, local Ollama, etc.) and routes them through a local proxy on port 8317 rather than direct cloud endpoints, giving operators visibility into and control over what autonomous coding/tool-using agents execute. It runs structured "security sweep" and threat-modeling workflows against a target repo (`./shannon start`) and includes deterministic cleanup routines (`./shannon cleanup`) to remove agent-generated scripts and execution residue and prevent workspace pollution/exposure. It targets a threat model broader than chat-based prompt injection: agent tool-execution drift, dependency supply-chain issues, and unverified code paths in "agentic company" shell-access workflows.

DockerLiteLLMOpenRouter+3

AI Security· Published and added 31 Aug 2026

wiz.iowriteup🛡️ Security

Inside 90 days of attacks on AI infrastructure

Wiz Threat Research ran honeypots across LiteLLM, Flowise, LangChain, Langflow, ChromaDB, Ollama and other AI/ML services for 90 days, capturing active exploitation of an MCP Gateway auth bypass (CVE-2026-59822) and an MCP server test-endpoint command injection (CVE-2026-42271, in CISA KEV, chainable with Starlette CVE-2026-48710 for unauthenticated RCE and linked to Qilin ransomware exploitation) used to deploy fileless cryptominers. It also documents blind prompt injection campaigns against LangChain, Flowise, OpenWebUI, and Node-RED agents that trigger OS command execution confirmed via out-of-band DNS callbacks to OAST domains.

LiteLLMLangChainFlowise+3
CVE-2026-59822CVE-2026-42271CVE-2026-48710+2

Threat Intel, Offensive Security, AI Security· Added 3 Sep 2026, published 27 Aug 2026

github.comrepo🛡️ Security

numasec

numasec is an open-source AI security agent that runs in the terminal, wrapping a user-chosen LLM (OpenAI, Anthropic, Google, Bedrock, Ollama, etc.) with an operation kernel that tracks target scope, runbooks, findings, evidence, replay, and reports across a security engagement. It orchestrates local tools such as nmap, sqlmap, ffuf, gobuster, nikto, nuclei, trivy, and checksec, and is aimed primarily at authorized AppSec triage and Pentest workflows, with OSINT, CTF, and cloud surfaces marked as less mature.

BunDockerNmap+3

AI Security, Offensive Security, AppSec· Published and added 27 Aug 2026

github.comrepo🛡️ Security

agentgg

agentgg is an open-source, agentic SAST scanner that uses LLM agents to read source code, follow imports, trace the call graph, and confirm findings before reporting — aiming to reduce the pattern-matching false positives of traditional SAST. It runs locally or as a hosted service, supports full-repo scans or git-diff PR review, and works with multiple model providers (Anthropic, OpenAI, AWS Bedrock, Google Vertex AI, OpenRouter, Ollama); agents are defined as markdown files with YAML frontmatter and are pulled from a community agents catalog.

Node.jsnpmAnthropic+3

AppSec, AI Security· Published and added 23 Aug 2026

github.comrepo🛡️ Security

Deep Eye

Deep Eye is an open-source Python pentesting framework that orchestrates 11 AI providers (OpenAI, Claude, Grok, Gemini, Ollama, Groq, Mistral, OpenRouter, LiteLLM, LM Studio, and more) with automatic failover to generate context-aware attack payloads for 50+ vulnerability classes including SQLi, XSS, SSRF, IDOR, JWT and GraphQL flaws. It adds an RAG-indexed CVE intelligence DB built from NVD/MITRE/Exploit-DB, AI-based finding triage and false-positive filtering, Nuclei-style YAML templates, Playwright browser automation, CAPTCHA-solving (reCAPTCHA/hCaptcha/Turnstile/Arkose), mitmproxy interception, and auto-generated HackerOne-style bug bounty reports with PCI-DSS/SOC2/ISO 27001 compliance mapping, SARIF/JUnit export, scan diffing, and retest workflows.

OpenAIClaudeGemini+3
PCI DSSSOC 2ISO 27001:2022+3

Offensive Security, AI Security· Added 3 Sep 2026, published 22 Aug 2026

github.comrepo🛡️ Security

Teycir/BurpAPISecuritySuite

BurpAPISecuritySuite is a Jython-based Burp Suite extension that consolidates API reconnaissance, intelligent fuzzing (108+ payloads across 15 attack types including BOLA, IDOR, JWT exploitation, GraphQL abuse, SSTI, and WAF bypass), and passive deep-logic checks (counterfactual differentials, sequence invariants, token lineage, cross-interface parity drift) into a single tool covering the OWASP API Top 10. It auto-captures and normalizes API traffic, exports attack campaigns to Burp Intruder/Turbo Intruder/Nuclei, and generates AI-ready bundles (ChatGPT/Claude/Ollama) for LLM-assisted triage, while orchestrating external tools like ApiHunter, Katana, httpx, FFUF, Kiterunner, sqlmap, and Dalfox for verification.

Burp SuiteNucleiGraphQL+3
IDORBOLA

AppSec, Offensive Security· Published and added 21 Aug 2026

huggingface.cotool🛡️ Security

philbert440/Qwen3.8-27B-Uncensored-Cyber-GGUF

philbert440/Qwen3.8-27B-Uncensored-Cyber-GGUF is a llama.cpp-format GGUF release of a Qwen3.8-27B fine-tune deliberately de-refused ('uncensored') and tuned to fully answer cyber and offensive-security questions, shipped with a vision projector and an MTP speculative-decoding head. The card includes a Claude-judged evaluation against a 100-prompt held-out cyber-offensive regex refusal harness and provides run instructions for llama.cpp, Ollama, vLLM, LM Studio, and Docker Model Runner. It exemplifies the growing trend of publicly distributed abliterated/de-refused LLMs positioned for offensive-security use, relevant to AI red-teaming and dual-use misuse tracking.

QwenHugging Facellama.cpp+2

AI Security, Offensive Security· Published and added 21 Aug 2026

trendmicro.comwriteup🛡️ Security

Sockpuppeting: How a Single Line Can Bypass LLM Safety Guardrails | TrendAI (US)

Trend Micro details sockpuppeting, a jailbreak technique that injects a fake acceptance prefix such as Sure here is as the final assistant-role message via the API assistant-prefill feature, exploiting LLM self-consistency to bypass safety training with no gradient access or optimization required. The team tested 14 prefix variants across 11 models from four providers including GPT-4o, Claude 4 Sonnet, Gemini 2.5 Flash, Qwen, Llama, and Gemma, finding every model that accepted the prefill was at least partially vulnerable, with Gemini 2.5 Flash worst at 15.7 percent attack success rate, while OpenAI, AWS Bedrock, and Claude 4.6 block the attack entirely by rejecting assistant-terminated message ordering. Self-hosted inference servers like Ollama and vLLM do not enforce this validation by default, leaving self-hosted deployments exposed.

GPT-4oClaudeGemini+6
sockpuppetingGreedy Coordinate GradientDo Anything Now+4

AI Security· Added 16 Aug 2026

defcon.orgother🛡️ Security

DEF CON® 34 Hacking Conference - Main Stage Talks

The official DEF CON 34 main-stage talk listing, with full abstracts and speaker bios for dozens of original research presentations spanning bootrom-to-wallet-key exploitation of the dGEN1 Ethereum phone, a privilege-escalation chain in Microsoft's Python-in-Excel Azure container (CVE-2026-45459), a novel x86 SMM hardware attack, black-box TEE key recovery on the TI OMAP-L138 via timing side channels, native-code exploitation of llama.cpp and Ollama, a CDP-based Browser-in-the-Middle AitM phishing toolkit defeating CSP/SRI, CPDLC air-traffic-control message injection via SDR, an iCloud Keychain extraction bug (CVE-2026-28860), Segmentation Fault-Oriented Programming (SFOP) for bypassing Intel CET, weaponized WMI provider post-exploitation, an autonomous AI system (HTTP Terminator) discovering novel HTTP desync attacks, quantum ML for OS fingerprinting, reverse engineering of Windows Defender's BTR.sys driver for EDR bypass, a V8 renderer RCE in Samsung Internet (CVE-2025-10891), an LLM CI build-gate bypass, a Bring-Your-Own-EDR PPL abuse technique, Amazon Locker hardware hacking, and Windows PnP USB auto-install RCE via RDP redirection.

llama.cppOllamaWindows Defender+3
CVE-2026-45459CVE-2026-28860CVE-2025-10891+9

Offensive Security, Hardware & RF, AI Security· Added 10 Aug 2026

wiz.iowriteup🛡️ Security

Cloud Threat Highlights: H1 2026

Wiz's H1 2026 cloud threat report documents a 60% jump in significant incidents driven by a doubling of supply-chain attacks (TeamPCP's npm/PyPI/GitHub Actions credential-harvesting spree, its open-sourced Shai-Hulud worm spawning Miasma/Hades/Megalodon/IronWorm follow-ons, North Korea's axios and @mastra trojanizations) and by growing attacks on AI infrastructure, including exposed unauthenticated MCP servers, LiteLLM/Dify/Langflow/n8n/Ollama vulnerabilities, and cryptominers deployed via a Langflow RCE. It also profiles JINX-0163, a cloud-native extortion group targeting non-human identities (service accounts/IAM roles) across AWS/Azure/GCP/Okta/Snowflake linked to the "FulcrumSec" extortion brand, and closes with concrete detection techniques for stolen access keys, Kubernetes VM Run Command abuse, GCP org-policy tampering, and CloudTrail user-agent/boto3 credential-provenance mismatches.

npmPyPILiteLLM+3
TeamPCPShai-HuludMiasma+11

Supply Chain, Threat Intel, AI Security, Cloud & Infra· Added 3 Sep 2026, published 6 Aug 2026

github.comrepo🛡️ Security

Dark-Moon

DarkMoon is a self-hosted, GPLv3 AI penetration testing platform that orchestrates 50 specialist agents over an MCP-gated toolbox (Nuclei, BloodHound, sqlmap, Impacket, Naabu, httpx, ffuf, etc.) to autonomously run recon-to-exploitation across web, API, Active Directory, Kubernetes, multi-cloud, CI/CD, databases, IoT firmware, and AI/LLM inference endpoints. It uses a Privacy Gateway that tokenizes real IPs/hosts/credentials into placeholders so raw infrastructure data never reaches the (optionally local, e.g. Ollama/llama.cpp) LLM, and can generate sandbox-validated, exploit-retested pull requests for findings. It also ships a dedicated LLM agent that probes OpenAI-compatible/Ollama/vLLM/TGI inference endpoints for the OWASP LLM Top 10 (prompt injection, jailbreaks, system-prompt leakage) using garak-backed probes.

Model Context ProtocolMITRE ATT&CKNuclei+3
ISO 27001NIST SP 800-115OWASP Top 10 for LLM Applications

Offensive Security, AI Security· Published and added 5 Aug 2026

github.comrepo🧠 AI

autonomous-ai/openharness

OpenHarness (Autonomous) is an open-source command center for running coding agents such as Claude Code, Codex, Cursor, OpenCode, Devin, Amp and Copilot. A native app and per-machine daemon run each agent in its own tmux pane, with a git worktree per harness. Machines are linked by password, with end-to-end encrypted traffic over direct WebRTC, Cloudflare TURN or a keyless relay. It also supports local models (Ollama, MLX-LM, vLLM, Grid) and a Store of domain-specific harnesses (Blender, CircuitJS, MuJoCo, Godogen, Strudel, RDKit, Typst) defined by a harness.json. An optional open-hardware always-on display device shows agent status.

Claude CodeCodexCursor+17
Autonomous

coding-agents, agents· Added 16 Oct 2026, published 4 Aug 2026

x.comthread🧠 AI

Retrochainer Post

A tiered hardware guide ("the ladder") for running local LLMs in 2026, ranking ten setups from a free existing laptop through Raspberry Pi 5, Jetson Orin Nano Super, Mac mini/Mac Studio, used RTX 3090, RX 7900 XTX, AMD Strix Halo (Ryzen AI Max+ 395), RTX 5090, up to the NVIDIA DGX Spark. It frames unified memory (not raw TOPS) as the real constraint on model size, gives concrete specs/prices/token throughput per rung, and walks through setting up Ollama + Open WebUI plus an OpenAI-API-compatible local endpoint, with cost comparisons against ChatGPT Plus/Claude Pro/Cursor subscriptions and n8n-based automation examples.

OllamaOpen WebUIn8n+4
NVIDIA Jetson Orin Nano SuperApple Mac mini M4Apple Mac Studio M3 Ultra+12

inference· Added 22 Sep 2026, published 1 Aug 2026

github.comrepo🛡️ Security

AgentHound

AgentHound is an open-source offensive security framework that, from a single compromised host, collects local credentials and agent configuration, discovers and fingerprints reachable AI services (MCP servers, A2A agents, model gateways, inference servers like Ollama, vector stores, MLOps platforms, notebooks), reuses harvested credentials to verify concrete access, and writes everything to a checkpointed JSON artifact. An optional analysis server (Neo4j/PostgreSQL-backed) turns the artifact into a queryable attack graph with credential-chain, cross-protocol pivot, exfiltration/execution paths, and prompt-injection-related findings (POISONED_INSTRUCTIONS, POISONED_DESCRIPTION, SHADOWS). It supports an active mode (credential reuse, differential reads, reversible mutation with auto-rollback) and a read-only --stealth mode for OPSEC-constrained engagements.

Model Context ProtocolOllamaNeo4j+2

AI Security, Offensive Security· Published and added 1 Aug 2026

github.comrepo🛡️ Security

Beetle

Beetle is an offline-first mobile application security platform that statically analyzes Android APKs and iOS IPAs (including Flutter and React Native apps), combining decompilation, taint analysis, secret/endpoint extraction, certificate and native-binary hardening checks, and CVE enrichment with explainable 'intelligence engines' (ownership, confidence, evidence selection, finding fusion) that correlate findings into evidence-backed attack chains. It maps results to OWASP MASVS/Mobile Top 10, provides source-level navigation, and exports SARIF, CycloneDX SBOM, and PDF reports, with optional (non-scanning) AI assistance via Claude, OpenAI, Gemini, DeepSeek, or local Ollama for explaining findings.

AndroidiOSDocker+3

Mobile Security, AppSec· Published and added 31 Jul 2026

github.comrepo🛡️ Security

PentesterFlow/agent

PentesterFlow is an open-source terminal AI agent for authorized offensive-security engagements, connecting to local or hosted LLMs (Ollama, LM Studio, Anthropic, Gemini, DeepSeek, Groq, OpenRouter, etc.) to plan and execute recon, enumeration, vulnerability validation, and evidence-backed reporting against a scoped target. It gates sensitive actions behind analyst approval, bridges with Burp Suite for traffic capture/finding import via a local listener and companion MCP server, and maintains persistent project/personal memory (redacting secrets) to carry lessons and coverage state across sessions. The demo walks through discovering and confirming an IDOR on an orders API and writing findings to a local markdown report.

Burp SuiteOllamaModel Context Protocol+3
IDOR

Offensive Security, AI Security· Published and added 29 Jul 2026

github.comrepo🛡️ Security

weirdmachine64/GhidraGPT

GhidraGPT is a Ghidra extension that sends a selected function's decompiled C to an LLM provider (OpenAI, Gemini, Ollama, etc.) and streams results back into a console, offering three actions: Explain (natural-language summary), Rewrite (recovers names/types and writes them back into the Ghidra database), and Audit (best-effort single-function review for issues like unbounded copies and integer overflows). Analysis is scoped to one function's decompiler output with no cross-function dataflow, so audit findings are leads to verify rather than sound static-analysis proof; API keys are stored locally with only XOR obfuscation, not real encryption.

GhidraLLMMaven+1

Malware & RE, AI Security· Published and added 20 Jul 2026

github.comrepo🧠 AI

ailinone/collective-intelligence

Collective Intelligence is an open-source (AGPL-3.0) OpenAI-API-compatible gateway that routes a single request across a continuously-discovered pool of AI models (claimed ~90 provider integrations, 103,224 indexed models) using one of 32 coordination strategies - consensus with convergence floors, blind debate, expert panels, devil's-advocate consensus, cost-cascade, best-of-N with objective verification - instead of sending it to one model. Every response carries an ailin_metadata provenance record (strategy used, models used, cost, dissent), and the repo ships a reproducible benchmark harness with raw per-execution CSVs claiming the coordinated pool beats GPT-5.5-pro, Claude Opus 4.8, Gemini 3.1 Pro and Grok 4.3 on verifiable tasks (97% vs 68-82%). It installs via Docker Compose, exposes an OpenAI SDK-compatible base_url swap, and supports a no-API-key Ollama degraded self-hosted mode.

DockerOpenAI APIOllama+3
GPT-5.5-proClaude Opus 4.8Gemini 3.1 Pro+3

ai-infra· Added 2 Oct 2026, published 20 Jul 2026

github.comrepo🛡️ Security

Argo

Argo is an LLM-native static application security testing tool that drives Claude Code, Codex, Gemini, or local models (via Ollama/LM Studio) as an AI analyst to audit source code, extract security invariants, and produce reviewable vulnerability reports with optional patch generation and ASan-verified proof-of-concept crashes. It positions itself as a complement to rule-based SAST tools like CodeQL and Semgrep, targeting logic/authorization bugs that fixed patterns miss, and has been used to find real, disclosed vulnerabilities across 15 audited open-source projects (53 PRs, 2 CVEs). It supports two modes — general code audit and bug-bounty triage with scope-enforced, read-only, opt-in live verification guardrails.

Claude CodeCodexGemini+3

AppSec, AI Security· Added 3 Sep 2026, published 18 Jul 2026

github.comrepo🛡️ Security

CyberSunil/LLMVault

LLMVault is a self-hosted, deliberately-vulnerable training range modeled on WebGoat but for LLM applications, covering 25 labs across the OWASP Top 10 for LLM Applications (2025) - prompt injection, jailbreaking, data/model poisoning, agent exploitation, model extraction, and insecure downstream output handling. It ships two modes: a scored Play Mode with scripted assistants for repeatable flag capture, and an unscripted Live Mode that points the same attacks at a real local Ollama model (qwen2.5:3b-instruct) with a freshly minted per-session secret, requiring the player to actually talk the model into leaking it. Each lab pairs the attack with a written defense explanation, and an expert tier is shipped AES/Fernet-encrypted and unlocked manually by the maintainer.

OllamaFlaskDocker+3
OWASP Top 10 for LLM Applications

AI Security, Learning· Published and added 18 Jul 2026

github.comrepo🛡️ Security

GoogleCloudPlatform/k8s-aibom

k8s-aibom is a Kubernetes controller from GoogleCloudPlatform that generates CycloneDX 1.6 ML-BOM documents at runtime for AI workloads — inference services (vLLM, TGI, Triton, Ollama), agent stacks (LangChain, AutoGen, CrewAI), RAG/vector DB infrastructure (Milvus, Qdrant, Weaviate), and training/eval jobs — by watching Kubernetes API objects with no privileged access. Each BOM attribute carries a declared/inferred/unresolved confidence flag and evidence locator, and the project positions its output as auditor-traceable evidence for EU AI Act Article 12/50, NIST AI RMF, and ISO/IEC 42001 compliance, with redaction filters, immutable GCS write-once sinks, and Sigstore-signed release attestations.

KubernetesCycloneDXSigstore+3
EU AI ActNIST AI RMFISO/IEC 42001+2

Supply Chain, Cloud & Infra, GRC· Published and added 18 Jul 2026

github.comrepo🛡️ Security

AI-Powered Threat Modeling

AITM is an open-source Python CLI (MIT licensed) that automates STRIDE threat modeling of system architectures using LLMs via Bedrock, OpenAI, or local Ollama. Given a text description or architecture diagram image, it identifies assets and data flows, generates STRIDE-categorized threats with CWE mapping (e.g. CWE-89 for SQLi), scores risk on a 5-level matrix, and outputs actionable mitigations in Markdown or JSON. The engine is stateless with a Pydantic data contract, designed to later support a REST API and frontend; an enterprise edition with additional features is offered commercially.

OllamaOpenAIAWS Bedrock+3
CWE-89

AI Security, AppSec· Added 3 Sep 2026, published 17 Jul 2026

opensourcemalware.comwriteup🛡️ Security

Cybersecurity Startup Publishes Infostealers to NPM

A security research team traces six typosquatted npm packages (anthropic-toolkit, ai-sdk-helpers, ollama-helpers, openai-agents-helpers, @langgraphjs/toolkit, and @aspect-security/argon2) impersonating Anthropic, Vercel, Ollama, OpenAI, LangChain, and Aspect Security back to the founder of a stealth-mode cybersecurity startup. The packages use npm preinstall/postinstall hooks to silently exfiltrate a rich identity fingerprint — hostname, git/GitHub emails, SSH key comments, reflog committer emails, AWS/GCP config metadata, corporate DNS domain, and host project name — to a Google Cloud Run endpoint, while deliberately avoiding literal credentials to look benign and offering a fake telemetry opt-out. The writeup also documents version backfilling to fake package maturity and shows the payload evolving from a crude April beacon to a polished June "identity graph" collector, with full IOCs provided.

npmNode.jsGoogle Cloud+3
Aspect SecurityranisaltProton AG+1

Supply Chain, Threat Intel· Added 3 Sep 2026, published 9 Jul 2026

github.comrepo🛡️ Security

elder-plinius/T3MP3ST

T3MP3ST is an open-source multi-agent offensive-security framework that turns an existing AI coding agent (Claude Code, Codex, Hermes, OpenCode, Oh My Pi, or a local Ollama/LM Studio/vLLM model) into an autonomous recon-to-exploit-to-report pipeline, with no separate API key required. It reports 90.1% pass@1 on XBOW's 104-challenge benchmark suite and claims 8/10 held-out post-cutoff CVEs identified down to file/line/CWE, with all headline numbers reproducible via a committed `npm run verify-claims` script. The 8-operator kill-chain design (Recon, Scanner, Exploiter, Infiltrator, Exfiltrator, Ghost, Coordinator, Analyst) maps to MITRE ATT&CK/Cyber Kill Chain phases, though only the Recon stage is described as fully live and the rest as scaffolded/experimental.

Claude CodeCodexOpenCode+5

Offensive Security, AI Security· Published and added 7 Jul 2026

github.comrepo🛡️ Security

0xSteph/pentest-ai

Pentest-AI (ptai) is an MIT-licensed tool that connects an AI client (Claude Code, Codex, or a local Ollama model) via MCP, CLI, or CI to drive a penetration-testing workflow. It uses "oracles" to reproduce candidate findings against a control case and stores results as replayable, portable proof capsules, distinguishing verified findings from unverified scanner/model output; it supports CI gating with SARIF export and OAST-based blind-vulnerability checks.

Model Context ProtocolClaude CodeCodex+4

AI Security, Offensive Security· Published and added 4 Jul 2026

opensourcemalware.comtalk🛡️ Security

The OpenSourceMalware Show #11

Episode 11 of the OpenSourceMalware Show covers npm's new 72-hour read-only account lockout for high-impact packages (triggered by email changes or 2FA recovery use) and GitHub Enterprise's new self-service credential revocation tool for incident response, noting each has gaps (lockout could hinder legitimate ATO recovery; revocation doesn't cover PATs created outside the enterprise boundary). The hosts also call out six npm packages published by a researcher at a stealth cybersecurity startup that target OpenAI, Anthropic, Vercel, and Ollama users — info-stealers that avoid credentials but exfiltrate .git/.ssh data, drawing a parallel to Snyk's 2025 malicious-package incident targeting Cursor. It also references an FBI FLASH notice on TeamPCP's TTPs/IOCs and previews a coming interview with Eclipse Foundation's head of security on Open VSX supply-chain risk.

npmGitHubOpenAI+3
TeamPCPFBI FLASHEclipse Foundation

Supply Chain, Threat Intel, Identity & Access· Added 3 Sep 2026, published 2 Jul 2026

github.comrepo🛡️ Security

XORCISM-AI/XORCISM

XORCISM is a self-hosted, open-source enterprise risk/exposure management platform (Node.js/TypeScript over SQLite/PostgreSQL/MySQL) that unifies asset inventory, vulnerability management, threat intel (STIX/TAXII), GRC (ISO 27001, NIST CSF/800-53, EBIOS Risk Manager, NIS2, DORA), incident management, and offensive/defensive testing into one continuously recomputed per-asset and enterprise risk score. It chains recon/exploitation tool connectors (nmap, nuclei, Metasploit, sqlmap) into attack-path/choke-point graphs weighted by fusion exploitability (EPSS+CVSS+KEV+public exploits), validates detection coverage via a purple-team loop against 3,750+ Sigma rules and MITRE ATT&CK/D3FEND, and quantifies ransomware impact in dollar terms via a FAIR-style model — with local-only Ollama AI assistants for triage, hunting, and reporting.

Node.jsTypeScriptSQLite+3
APT29SecureCodersRustinel

GRC, Offensive Security, Blue Team & Detection· Published and added 1 Jul 2026

github.comrepo🛡️ Security

OASIS

OASIS (Open Automated Security Intelligence Scanner) is an AI-powered SAST tool that runs local LLMs via Ollama or any OpenAI-compatible backend (vLLM, LiteLLM, LM Studio, llama.cpp) to detect vulnerabilities like SQLi and XSS in source code. It uses a two-phase scan (lightweight scan model + deep analysis model) orchestrated by a LangGraph pipeline (discover→scan→expand→deep→verify→report), adds a deterministic finding-validation agent that computes exploitability verdicts with confidence, and exports canonical JSON/SARIF/HTML/PDF reports with a web dashboard, RAG-backed chat assistant, --fail-on CI gating, and suppression/inline-ignore support.

OllamavLLMLiteLLM+3

AI Security, AppSec· Published and added 28 Jun 2026

github.comrepo🛡️ Security

RAPTOR

RAPTOR is an autonomous offensive/defensive security research framework built on top of Claude Code that chains static analysis (Semgrep, Coccinelle, CodeQL), binary analysis (radare2, Frida, Z3-based exploit feasibility), LLM-driven multi-stage vulnerability validation, exploit PoC generation, and patch writing into a single workflow against source code or compiled binaries. It also includes an /sca supply-chain command that enriches dependency findings with OSV, CISA KEV, EPSS, and SSVC data and emits CycloneDX SBOMs, and sandboxes LLM-generated/untrusted code execution using Linux namespaces, Landlock, and seccomp. Authored by Gadi Evron, Daniel Cuthbert, Thomas Dullien (Halvar Flake), Michael Bargury, and John Cartwright, it ships 200+ custom static analysis rules and supports multi-model LLM analysis (Claude, GPT, Gemini, Ollama).

Claude CodeSemgrepCodeQL+5
Gadi EvronDaniel CuthbertThomas Dullien+2

AppSec, Offensive Security, AI Security, Supply Chain· Published and added 28 Jun 2026

github.comrepo🛡️ Security

Armur-Ai/Pentest-Swarm-AI

Pentest Swarm AI is an open-source (AGPL-3.0), self-hosted CLI tool that runs dozens of LLM agents concurrently against a target, coordinating through a shared "stigmergic" blackboard rather than a fixed recon→exploit→report pipeline, so findings propagate and wake relevant agents in real time. It supports any provider with tool-calling (Claude, OpenAI-compatible endpoints, Together AI-hosted Llama/Qwen/DeepSeek/GLM, or fully local Ollama/LM Studio), ships bundled vulnerable labs (crAPI, Juice Shop, VAmPI, DVGA) for safe testing, and positions itself against the closed SaaS bug-bounty bot XBOW. It currently automates verified attack playbooks (BOLA/IDOR, mass assignment, NoSQL injection) with evidence-backed reporting, with roadmap items for runtime object-reference mining, self-correcting attacks, and on-demand specialist sub-agents.

ClaudeOllamaDeepSeek+3
XBOW

Offensive Security, AI Security· Published and added 21 Jun 2026

sysdig.comwriteup🛡️ Security

LLMjacking evolved: Attackers are using stolen AI compute to build offensive agentic tools | Sysdig

Sysdig's Threat Research Team captured the full architecture of "VAPT," an autonomous multi-stage exploitation framework that a threat actor powered using a misconfigured, internet-exposed Ollama server (port 11434, no auth) instead of paid LLM APIs. The tool chains service fingerprinting, CVE matching, PoC/blind-SQLi generation, credential extraction, privilege escalation, and an autonomous orchestrator that confirms RCE via a VAPTb3gin/VAPTfin marker wrapped around `id` output, and was observed being actively developed against private HackTheBox-style practice ranges before any real-world targeting. It represents the convergence of LLMjacking (stolen inference compute) with fully agentic offensive tooling, and the piece includes captured system prompts, IOCs, and hardening guidance for self-hosted model servers.

OllamaLLMLlama+2
VAPTLLMjackingSysdig Threat Research Team+1

Threat Intel, AI Security, Offensive Security· Added 28 Jun 2026, published 17 Jun 2026

github.comrepo🛡️ Security

Metis

Metis is an open-source agentic AI security code review framework built by Arm's Product Security Team that uses LLMs for semantic vulnerability detection rather than hardcoded rules. It performs deep security review across codebases (with C/C++ reachability analysis via a code graph), validates and triages findings from itself or third-party SAST tools to reduce false positives, and annotates SARIF output. It supports multiple LLM providers (OpenAI, Azure OpenAI, Anthropic, Gemini, AWS Bedrock, vLLM, Ollama, llama.cpp, LiteLLM) and vector-store backends (ChromaDB, PostgreSQL/pgvector, Qdrant) for RAG-based codebase indexing and querying.

SARIFPostgreSQLDocker+3

AI Security, AppSec· Published and added 31 May 2026

github.comrepo🛡️ Security

OWASP Noir

OWASP Noir is a static analysis (SAST) tool that reads source code to extract every endpoint an application exposes — paths, methods, parameters, headers, cookies, and their originating files — across 205 supported frameworks, with an LLM fallback (OpenAI/Ollama) for unsupported ones. The endpoint inventory (including shadow APIs and undocumented routes) is exported as JSON/YAML/OpenAPI/SARIF/cURL/Postman/HTML to feed DAST scanners (ZAP, Burp Suite, Caido, Gori), human security reviewers, and AI SAST auditors, with optional --ai-context enrichment (guards, sinks, validators, callees) and GitHub Action/CI integration.

OWASP ZAPBurp SuiteSARIF+3
OWASP

AppSec· Published and added 24 May 2026

github.comrepo🛡️ Security

CyberStrikeus/CyberStrike

CyberStrike is an open-source (AGPL-3.0) terminal-based framework that turns any LLM subscription (Claude, GPT, Gemini, local models via Ollama/LM Studio, etc.) into an autonomous red-team agent, providing 13+ specialized agents, 7,600+ Ed25519-signed security skill files mapped to OWASP WSTG/CWE, a built-in Chromium proxy browser for role/credential discovery, and remote "Bolt" MCP tool servers for orchestrating tools like nmap, sqlmap, and Burp-style traffic interception. It targets pentesters and bug bounty hunters for automated reconnaissance, vulnerability discovery, exploitation, and post-exploitation, explicitly restricted to authorized testing.

Model Context ProtocolClaude CodeOllama+3

Offensive Security, AI Security· Published and added 23 May 2026

github.comrepo🛡️ Security

KeygraphHQ/shannon

Shannon is an open-source autonomous AI pentester from Keygraph that analyzes application source code to map trust boundaries and attack paths, then uses browser automation and CLI tools to execute real proof-of-concept exploits against the running app before reporting a finding. It only reports vulnerabilities it can actually exploit (injection, XSS, SSRF, broken auth/authz), runs in an ephemeral Docker worker with any AI provider (Anthropic, OpenAI, xAI, AWS Bedrock, Ollama, vLLM, LM Studio, etc.), and ships GitHub Action/GitLab CI integrations that produce PDF/Markdown/JSON/SARIF reports and can gate releases on exploited-severity findings. It's licensed AGPLv3 and positioned to run continuous, code-informed pentests between annual human pentest engagements.

DockerSARIFGitHub Actions+3
PhotoviewDoyensecClaude Shannon

Offensive Security, AI Security, AppSec· Published and added 23 May 2026

github.comrepo🛡️ Security

OWASP/DockSec

DockSec is an OWASP Lab Project CLI that wraps Trivy, Hadolint, and Docker Scout to scan Dockerfiles, images, and Compose files, then uses an AI provider (OpenAI, Anthropic, Google, or local Ollama) to correlate findings, cut noise, and generate plain-English remediation suggestions. It supports CI/CD gating via exit codes, baselines, and auditable waiver files, outputs SARIF/CycloneDX SBOM/HTML/PDF/JSON/CSV/Markdown reports, and redacts secrets before any content reaches an LLM, with a fully offline/local-only mode for air-gapped teams.

DockerTrivyHadolint+3
CVE-2023-45853

DevSecOps· Published and added 14 May 2026

github.comrepo🧠 AI

Sim

Sim is an open-source (Apache 2.0) workspace for building, deploying and managing AI agents and workflows, offering a visual flow editor, 1,000+ integrations (Slack, Notion, HubSpot, Salesforce), knowledge base ingestion, and support for every major LLM plus local models via Ollama and vLLM. It ships as a cloud service (sim.ai), a desktop app, or a self-hosted Docker/Kubernetes deployment set up via an npx sim-setup wizard, and is built on Next.js, Bun, PostgreSQL/Drizzle, and ReactFlow.

Next.jsBunPostgreSQL+11
Simsim.ai

agents, llm-apps· Added 22 Sep 2026, published 13 May 2026

x.comthread🛡️ Security

Intelligence Cyber Digest

A Twitter thread reports that ZDI's Pwn2Own Berlin 2026 rejected dozens of working zero-day RCE submissions for the first time in 19 years due to running out of contest slots, prompting researchers to publicly disclose their exploit chains instead. Named cases include a researcher with 86 vulnerabilities across PyTorch, NVIDIA, Linux KVM, Oracle, Docker, Ollama, Chroma, LiteLLM, and llama.cpp now reporting directly to vendors, a full-chain Firefox RCE on Windows publicly demoed after rejection, a Claude Code RCE PoC, and 0-day RCEs in Ollama and LM Studio. The event still runs May 14-16, 2026 in Berlin with an estimated 150+ researchers having tried to register.

PyTorchOllamaDocker+3
Pwn2Own Berlin 2026ZDI

Offensive Security, Threat Intel· Added 3 Sep 2026, published 12 May 2026

github.comrepo🛡️ Security

knostic/OpenAnt

OpenAnt is Knostic's open-source Apache 2 licensed LLM-based vulnerability discovery tool that runs source code through a two-stage pipeline, an agentic detection phase followed by an attack and verification phase, to filter out false positives and surface exploit-verified findings. It is a Go CLI with a Python analysis backend supporting Go, Python, and several beta languages including JavaScript, C, PHP, Ruby, Zig, Swift, and Rust, with pluggable LLM providers such as Anthropic, OpenAI, Google, Ollama, OpenRouter, and Bedrock, plus diff and PR scoped scanning for CI and a local web UI.

GoPythonClaude+3
AardvarkClaude Code Security

AppSec, AI Security· Published and added 12 May 2026

github.comrepo🛡️ Security

BishopFox/aimap

AIMap is a Bishop Fox tool that discovers publicly exposed AI/ML endpoints (MCP servers, Ollama, vLLM/LiteLLM proxies, LangServe chains, Gradio apps, ComfyUI nodes) via 32+ curated Shodan queries, fingerprints them with Nuclei templates and live HTTP probes, and computes a 0-10 risk score based on auth, tool exposure, CORS, TLS, and system-prompt leakage. It also launches protocol-specific attack suites — MCP tool abuse, Ollama model extraction, prompt injection — with real-time streaming results and a Shodan-style query search interface plus a 3D globe visualization of findings.

ShodanNucleiModel Context Protocol+3

AI Security, Offensive Security, OSINT· Published and added 6 May 2026

github.comrepo🛡️ Security

zeroc00I/DontFeedTheAI

DontFeedTheAI is a transparent proxy built for pentesters that intercepts requests to LLM APIs (Claude Code, OpenAI SDK, OpenRouter, etc.), using a local Ollama-based detector plus regex to strip and surrogate real IPs, credentials, hostnames, and PII before the request leaves the machine, then restores the originals on the response. It ships a setup wizard for local Docker or VPS+SSH-tunnel deployment, a visual audit page for reviewing ORIGINAL→SURROGATE mappings, and an integration test suite (53 fixtures) to verify zero leaks across the full pipeline. The goal is to let engagements use cloud-quality LLM reasoning without ever sending real client data (org names, credentials, hostnames) to a third-party API.

OllamaClaude CodeOpenAI+2

AI Security, Offensive Security· Published and added 5 May 2026