Repository Index

Open device management

• osquery
• gitops
• device-management
• vulnerability-management

Tfsec is now part of Trivy

• terraform
• security
• scanner
• static-analysis

Data pipelines for cloud config and security data. Build cloud asset inventory, CSPM, FinOps, and vulnerability management solutions. Extract from AWS, Azure, GCP, and 70+ cloud and SaaS sources.

• aws
• gcp
• azure
• sql

syzkaller is an unsupervised coverage-guided kernel fuzzer

• linux
• kernel
• fuzz-testing
• fuzzing

Automated Αll-in-One OS command injection exploitation tool.

• python
• command-injection
• detection
• exploitation

Open Source Cloud Native Application Protection Platform (CNAPP)

• cloud-native
• vulnerability-management
• threat-analysis
• devsecops

w3af: web application attack and audit framework, the open source web vulnerability scanner.

• scanner
• security
• appsec
• cross-site-scripting

A high performance offensive security tool for reconnaissance and vulnerability scanning

• reconnaissance
• scanner
• vulnerability-assessment
• vulnerability-scanner

Potentially dangerous files

• list
• web
• vulnerability
• files

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

• scanning-tool
• secret-keys
• secrets-management
• infosectools

:closed_lock_with_key: Security advisories as a simple composer exclusion list, updated daily

• php
• security-advisories
• security-vulnerability
• composer

Create randomly insecure VMs

• security
• security-vulnerability
• virtualization
• randomization

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

• appsec
• compliance
• devsecops
• devsecops-tools

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

• iac
• infrastructure-as-code
• security
• appsec

A collection of JavaScript engine CVEs with PoCs

• javascript
• cve
• vulnerability

Reverse Shell as a Service

• reverse-shell
• exploit
• vulnerability
• pentesting

CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.

• cve-2026-109618
• cve-2026-109619
• detection-rules
• exploit

The Offensive Manual Web Application Penetration Testing Framework.

• web-penetration-testing
• reconnaissance
• vulnerability-analysis
• scanning-enumeration

Checklist of security precautions for Ruby on Rails applications.

• ruby
• ruby-on-rails
• rails
• security

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

• graphql
• security-scanner
• graphql-security
• api-documentation-tool

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

• azure
• defender-for-endpoint
• dfir
• kql

grep rough audit - source code auditing tool

• security
• shell
• vulnerability-detection
• source-code

cwe_checker finds vulnerable patterns in binary executables

• cwe
• binary-analysis
• static-analyzer
• vulnerability-scanner

A DNS rebinding attack framework.

• dns-rebinding
• dns
• vulnerability
• attack