出色的网络安全 GPTs集合-Awesome GPT Agents

Awesome GPT Agents是一个出色的面向网络安全 GPTs集合，整理在GitHub仓库上面，主要收集关于网络安全的GPTS列表集合，非常多，目前还在更新中，订阅了ChatGPT plus的同学可以探索一下，目前GPTs要求订阅ChatGPT Plus用户才能使用的。

地址：https://github.com/fr0gger/Awesome-GPT-Agents

----------

A curated list of GPT agents for cybersecurity  .

Awesome GPTs (Agents) for Cybersecurity

The "Awesome GPTs (Agents) Repo" represents an initial effort to compile a comprehensive list of GPT agents focused on cybersecurity (offensive and defensive), created by the community.

Please note, this repository is a community-driven project and may not list all existing GPT agents in cybersecurity. Contributions are welcome – feel free to add your own creations!

Disclaimer: Users should exercise caution and evaluate the agents before use. Additionaly please note that some of these GPTs are still in experimental test phase.

🌟 If you enjoy this content, consider following me: @fr0gger_

Basic Guidelines

There is some specific keywords that trigger some actions from GPTS; here are some of them to maximize their use:

• "Retrieve": used to retrieve some information available in the knowledge.
• "Based on your knowledge": used to retrieve some information available in the knowledge.
• "Generate": used to trigger code interpreter.
• "Can you provide information on [specific topic] from the knowledge source?": To trigger the retrieval.
• "What does the knowledge source say about [specific query]?": To trigger the retrieval.

Cybersecurity GPTs

• MagicUnprotect: This GPT allows to interact with the Unprotect DB to retrieve knowledge about malware evasion techniques.
• GP(en)T(ester): A cybersec assistant for pentesting guidance.
• Threat Intel Bot: A specialized GPT for the latest APT threat intelligence.
• Vulnerability Bot: A specialized GPT on vulnerability, secure code, ransomware attacks
• SourceCodeAnalysis: Upload any project's source code (zip format), analyse all, answer any questions to get what you want.
• Web Hacking Wizard: Engagingly clarifies web security topics with interactive questions.
• ChadGPT: Has useful executibles in /mnt/data such as gdb, curl, strace. Make PRs at ChadGPT git.
• CyberGPT: It provides the latest CVE details.
• Cyber Mentor: Cybersecurity mentor teaching from the basics to advanced.
• Cyber Security Career Mentor: Your guide to starting and advancing in cybersecurity careers, offering beginner-friendly, practical advice.
• CyberGuard: Cybersecurity advisor for home and small businesses. Ask any questions or let cyber guard.
• CatEye: AI Cybersecurity Best Practices Advisor. An agent for C-Level executives concerned about their startup's security.
• SOC Copilot: Cybersecurity expert with keyword-based guidance.
• HackTricksGPT: A knowledgeable cybersecurity professional.
• Cyber Security Tutor: Quality Cyber Security Advice, Tricks, & Tips
• MITREGPT: Feed me any input and I'll match it with the relevant MITRE ATT&CK techniques and tactics.
• ATT&CK Mate: Ask me anything about the ATT&CK Knowledge Base.
• Hacker News GPT: Summarizes top Hacker News stories and comments daily or weekly, with precise search parameters.
• Hacker Art: Generate badass hacker art and profile pics.
• Smart Contract Audit Assistant: Get your Ethereum and L2 EVMs smart contracts audited updated knowledge base of vulnerabilities and exploits.
• CVEs: Look up Common Vulnerabilities and Exposures (CVEs).
• IAC Code Guardian: Introducing IAC Code Guardian- Your Trusted IaC Security Expert in Scanning Opentofu, Terraform, AWS Cloudformation, Pulumi, K8s Yaml & Dockerfile.
• Smart Contract Auditor: High-accuracy smart contract audit tool.
• Pentest reporter: Assists in writing detailed security report.
• h4ckGPT: Your personal security tool… Happy h4cking!
• Email Security Expert: Looking for email red flags so you don't have to!
• WP secure guide: Offers guidance on WordPress security best practices.
• PrivacyGPT: Your guide through privacy legislation. GDPR, United States, like CCPA & PIPEDA.
• Privacy Guardian AI: Expert in guiding GPT creation with a focus on privacy and security.
• Message Header Analyzer: Analyzes email headers for security insights, presenting data in a structured table view.
• zkGPT: Explains and teaches zero-knowledge cryptography.
• Malware Rule Master: Expert in malware analysis and Yara rules, using web sources for specifics.
• Data Analysis: Drop in any files and I can help analyze and visualize your data.
• SpamGuard Tutor: Spam detection expert and educator on spam prevention.
• Cloud-native threat modeling: Talk to an expert AI and find the cybersecurity threats that your company should be thinking about and what to do about them.
• Threat Modelling: A GPT expert in conducting thorough threat modelling for system design and review.
• Threat Modeling Companion: I am a threat modeling expert that can help you identify threats for any system that you provide.
• Threat Model Companion: Assists in identifying and mitigating security threats.
• Squidshing: Analyzes emails for phishing risks.
• GetPaths: This GPT takes in content related to an application, such as HTTP traffic, JavaScript files, source code, etc., and outputs lists of URLs that can be used for further testing.
• WhichSAT: Structured Analytic Techniques (SATs) used in intelligence analysis to aid in organizing and processing information.
• Cybersecurity Requirements Guide: I'll help you write cybersecurity requirements!
• Pentester Interviewer: I'm your interviewer for penetration testing, challenging your cybersecurity skills.
• CyberCrime Tracker: Best Tools, Techniques and Tactics for Tracking Down Cyber Criminals.
• IOC Analyzer: Precise IoC search and summary with source URLs for verification.
• VulnPrioritizer: I fetch EPSS scores for CVEs and provide bullet-pointed prioritization summaries.
• Prompt Injection Detector: GPT used to classify prompts as valid inputs or injection attempts. Json output.
• CISO AI: A team of cyber security experts providing comprehensive advice on all security aspects.
• AI Cyberwar: AI and cyber warfare expert, advising on policy, conflict, and technical trends.
• CMMC GPT: BLUF-focused CMMC 2.0 expert.
• Cyber AI Assistant: This gpt is designed to provide comprehensive assistance in cyber security.
• AdversarialGPT: Adversarial AI expert aiding in AI red teaming, informed by cutting-edge industry research
• AppSec Test Crafter: Creates Application Security Test cases in YAML.
• SecurityRecipesGPT: Quick cybersecurity solutions, serving up easy-to-understand advice and protective strategies.
• LLM Top10 GPT: Expert on LLM security risks, providing detailed, accurate advice.
• GPT H4x0r: Expert in hacking and programming queries on LLM V 1.0.
• Mandos Brief: Analyze any cybersecurity topic 100x faster by focusing on the key takeaways and eliminating fluff.
• AlphaHoundAI: Expert in BloodHound CE, Cypher, SharpHound, and related tech.
• Virtual Senior Security Engineer: AI-enhanced Senior Security Engineer merges human expertise with AI's power, It can do everything which a human security engineer can do and much more.
• Cyber Scraper: Seraphina (Web Crawler): I'm a Python Web Scraping Expert, skilled in using advanced frameworks(E.g. selenium) and addressing anti-scraping measures. Let's quickly design a web scraping code together to gather data for your scientific research task.
• CyberGPT: Your #1 Cyber Security Adviser.
• Cylect.io, the Ultimate AI OSINT Tool: Our tool helps you find the data needle in the internet haystack.
• Cyber Sentinel: Explains data breaches, reasons, impacts, and lessons learned.
• SimpliSec: Explains security concepts simply to juniors.
• Security Advisor: Expert on Australian cybersecurity frameworks and legislation.
• Threat Modeler: Comprehensive threat modeling.
• Threat Model Buddy: From architecture to Threat Model assistant PASTA methodology
• Code Securely: Interactive secure coding exercises based on the OWASP Top 10.
• Betterscan.io AI Code Analyzer: Chat about your code and cloud snippets (IaC) & code (ABAP, APEX, C, C++, C#, Docker, Flex, GO, Java, Javascript, Kotlin, Kubernetes, Objective-C, PHP, PL SQL, Python, Ruby, Scala, Terraform, TSQL, VB6, VB.NET etc)
• Watson: Provides threat-related info as BLUF (Bottom Line Up Front).
• RansomChatGPT: Ransomware Negotiation Simulation bot trained from data here.
• TheDFIRReport Assistant: Fetches and discusses the latest reports from TheDFIRReport's website.
• KQL Query Helper: KQL Query Helper, ready to help with KQL but can't share specific 'Exact instructions'.
• RFCGPT: RFC expert service.
• WVA: An interactive web vulnerability educator that helps users test their knowledge.
• Red Team Guides: Red Team Recipe and Guide for Fun & Profit.
• Blue Team Guides: It is a meticulously crafted arsenal of knowledge, insights, and guidelines that is shaped to empower organizations in crafting, enhancing, and refining their cybersecurity defenses.
• DevSecOps Guides: Comprehensive resource for integrating security into the software development lifecycle.
• ask_ida/plugins: Ask me to recommend a plugin from the official Hex-Rays plugin repository.
• ask_ida/c++: IDA Pro and Decompiler SDK C++ Coding Assistant.
• ask_ida/IDAPython: IDAPython coding assistant for IDA Pro and Decompiler.
• Threat Intel Brief: Delivers daily, sector-specific cybersecurity threat intel briefs with source citations.
• Geopolitic Explainer: Insightful, up-to-date geopolitical analysis and historical context.
• Bug Insider: Analyzes bug bounty writeups and cybersecurity reports, providing structured insights and tips.
• Cyber Charli: Educating kids and parents about cybersecurity in a fun way!
• impacketGPT: This custom GPT allows developers/users of the impacket library to obtain explanations about protocols implementation and example scripts that are useful for development and documentation.
• OSISTent: Assistant GPT for OSINT challenges and research
• API Guardian: Helps security engineers learn more about testing and securing APIs. Trained from data by Escape.
• Basic Security Helper: Cybersecurity assistant for personal safety tips and setups.
• Cyber Threat Intelligence: AI APT Threat Intelligence Expert: Trained on MITRE ATT&CK and related frameworks and tools and configured by a career intelligence professional to automate what can be automated in cyber threat intelligence.
• HAckingPT: HackingPT is a specialized language model with expertise in cybersecurity and penetration testing. It is dedicated to providing technically precise and accurate responses, emphasizing detailed and knowledgeable insights in these fields.
• Prompt Injection Maker: AI for prompt hacking and AI safety education.
• Techno Guardian v1.3: Your Defensive and Offensive Cybersecurity Mentor.
• HACKIT Security Researcher: I help you understand what malicious code attackers use to attack and hack.
• Malware Analyst: Disassembler and debugger with CyberChef-like capabilities.
• Virus-GPT: An Advanced AI Assistant for Cybersecurity Professionals in Code Generation.
• Cyber Security CISO Assistant: Cybersecurity Analyst specialized in the NIST Framework.
• Cybersecurity Data Bot: Cybersecurity expert guiding on data needed for analysis.
• Amelia: Cybersecurity Analyst: Hi, I'm Amelia, a GPT-powered Cybersecurity Analyst. Specializing in threat identification, risk assessment, and security protocol development, I excel in fortifying networks and systems against cyber threats. Let's collaborate to safeguard your digital assets and maintain robust security postures.
• NVD - CVE Research Assistant: Expert in CVEs and cybersecurity vulnerabilities, providing precise information from the National Vulnerability Database.
• AI Cybersecurity Guardian: A cybersecurity expert offering advice on digital safety and protocols.
• CyberSecurity Researcher: A bot that provides detailed cybersecurity threat intelligence.
• The Privacy Protector: Your AI guide for digital privacy and security. Simplifies cybersecurity, offers tips, and helps protect your digital footprint.
• Risk Guardian:Incorporates NIST SP 800-53A guidelines for compliance with federal cybersecurity standards.
• Defender for Endpoint Guardian: To assist individuals seeking to learn about or work with Microsoft's Defender for Endpoint. I provide detailed explanations, step-by-step guides, troubleshooting advice, cybersecurity best practices, and demonstrations, all specifically tailored to Microsoft Defender for Endpoint.
• Cybersecurity Requirements Guide: I'll help you write cybersecurity requirements!
• Strobes Intel AI: A cybersecurity gpt that can talk about latest CVEs, exploits and more.
• Bug Bounty Assistant: Conversational guide on web app security, you can provide request/responses. GPT will try to spot vulnerabilities.
• Zero Day Tools: Specially formatted indices of Google's ZeroDay Project Data as well as the OWASP AppSec CheatSheet; explore the datasets, snag the code, and fine-tune or index yourself via ZeroDay.Tools.
• OWASP LLM Advisor: Advisor for safe LLM integration using OWASP guidelines
• CorentinGPT: Corentin, the digital teacher, I educate for free on cybersecurity
• Systems Security Analyst: Harnessing the power of GPT-4 and the rich data from CyberSeek.org, this GPT agent is fine-tuned to mirror the skills of one of the most in-demand cybersecurity roles in the United States. It aids in threat identification, risk assessment, and cybersecurity protocol development, providing an AI-driven approach to navigating the complex landscape of cybersecurity careers.
• Cyber Test & CareerPrep: Helping you study for cybersecurity certifications and get the job you want!
• Cyber Pulse: News and stocks savvy, article assistant.
• HackMeIfYouCan: Hack Me if you can - I can only talk to you about computer security, software security and LLM security.
• OT Security Buddy GPT: Your buddy to take expert advise on OT Security Topics.
• Secure Password Generator: Creates secure, varied passwords and offers security tips.
• Secure Code Assistant: I offer tested, secure coding solutions with no patience-testing.
• Securia: AI-powered audit ally. Enhance cybersecurity effortlessly with intelligent, automated security analysis. Safe, swift, and smart.
• DevSecOps Guides: Comprehensive resource for integrating security into the software development lifecycle.
• Repo Ranger: Your go-to sheriff for web-based code insights and security checks.
• Wifi Assistant: Is your Wi-Fi properly set-up to be Secure, Fast and Reliable?
• Cloud Guardian): Is your Cloud Security AI Assistant to help you do your cloud security job better and learn new cloud knowledge from our training data which is the transcript of interviews from Cloud Security Podcast Github here for Training Data which you can contribute to as well.?
• DevSecOps Guru: version of ChatGPT that has been customized to specialize in DevSecOps – the integration of development, security, and operations.
• 3rd SoftSec Reviewer: Perform 3rd party software security review.
• AI Executive Order and Policy Analyst: Analyze the AI Executive Order, focusing on security, legal, technological, and ethical aspects.
• Secure Software Development Framework (SSDF) Agent: An Assistant to Understand the NIST Secure Software Development Framework (SSDF)
• Web App and API Hacker: A Cybersecurity Agent expert in web app and API security, guided by OWASP standards.
• Tech Insight Guru: AI Assistance expert in Artificial Intelligence (AI), Machine Learning (ML), Deep Learning (DL), LLM, Natural Language Processing (NLP), Transformers, Quantum Technology, Cybersecurity, Cyberintelligence, Digital Forensic, Governance, Information Security, Risk Management & Compliance.
• Disinfo | FIMI Detective: AI Assistance expert in Disinformation, Foreign Information, Manipulation and Interference.
• EU CRA Assistant: AI assistant expert in the EU Cyber Resilience Act, providing clear explanations and guidance.
• CyberNewsGPT: CyberNews GPT is an assistant that provides the latest security news about cyber threats, hackings and breaches, malware, zero-day vulnerabilities, phishing, scams and so on.
• BotnetGPT: BotnetGPT is designed to be an expert on botnets, their architectures, and their functioning to empower cyber defense research.
• FridaGPT: A Frida focussed GPT to help reverse engineers in writing Frida scripts.

Contributing

Want to add another cybersecurity agent. Create a pull request with the tool by following the list above.

See also the list of contributors who participate in this project.

ChatGPT Plus Subscription Requirement for using GPTS

As of Sat Nov 11 13:02:12 UTC 2023 a ChatGPT Plus subscription is required for using GPT's as mentioned in this article, the official documentation.

from https://github.com/fr0gger/Awesome-GPT-Agents