EMBA - The firmware security analyzer
- firmware
- linux
- embedded-linux
- security-tools
Repository Index
60,121 visible repositories in the index
97–120 of 189 · Most stars
Potentially dangerous files
- list
- web
- vulnerability
- files
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
- scanning-tool
- secret-keys
- secrets-management
- infosectools
Tool to look for several security related Android application vulnerabilities
:closed_lock_with_key: Security advisories as a simple composer exclusion list, updated daily
- php
- security-advisories
- security-vulnerability
- composer
Create randomly insecure VMs
- security
- security-vulnerability
- virtualization
- randomization
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
A collection of JavaScript engine CVEs with PoCs
- javascript
- cve
- vulnerability
The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.
Reverse Shell as a Service
- reverse-shell
- exploit
- vulnerability
- pentesting
finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
- security-vulnerabilities
- security
- vulnerabilities
- lighthouse
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
- graphql
- security-scanner
- graphql-security
- api-documentation-tool
Checklist of security precautions for Ruby on Rails applications.
- ruby
- ruby-on-rails
- rails
- security
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
grep rough audit - source code auditing tool
- security
- shell
- vulnerability-detection
- source-code
The community's most comprehensive, continuously-updated index of research on Large Language Models for software vulnerability detection — papers across function-level, repository-level, agentic, and smart-contract detection, plus datasets, benchmarks, and surveys.
- awesome-list
- code-security
- large-language-models
- llm
Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
- tokenization
- web-security
- compliance
- security
Periodic cyber security newsletters that capture the latest news, summaries of conference talks, research, best practices, tools, events, vulnerabilities, and analysis of trending threats and attacks
- cybersecurity
- newsletter
cwe_checker finds vulnerable patterns in binary executables
- cwe
- binary-analysis
- static-analyzer
- vulnerability-scanner