#1Tools for blue team, defensive security, and threat protection.
Kitploit recommended
oscerd/cve-2026-85257Runnable Spring Boot and Quarkus reproducer for CVE-2026-85257, demonstrating camel-cxf SOAP fault information disclosure and verifying the…
oscerd/cve-2026-85260Runnable Spring Boot and Quarkus reproducer for CVE-2026-85260, demonstrating camel-mllp PHI logging in affected versions and suppression after the…
oscerd/cve-2026-85300Runnable Spring Boot and Quarkus reproducer for CVE-2026-85300, demonstrating camel-pqc writing private keys with permissive umask-derived file…
oscerd/cve-2026-85301Runnable proof-of-concept reproducer for the Apache Camel camel-keycloak issuer validation bypass (CWE-287), demonstrating affected and patched…
oscerd/cve-2026-85312Runnable proof-of-concept reproducer for CVE-2026-85312, demonstrating Apache Camel saga hijacking via the Long-Running-Action header in Spring Boot…
0xblackash/cve-2026-106173Documents CVE-2026-106173, a path traversal (CWE-22) in Fortinet FortiSIEM, with impact analysis, detection guidance, and mitigation steps for…
reloading01/certstream-server-rustHigh-performance Certificate Transparency (CT) monitoring tool written in Rust. Real-time stream of newly issued SSL/TLS certificates from CT logs.…
eliavila10/win32_hashPassword hashing and verification library for Windows, written in Ada/SPARK using the Windows CNG API (bcrypt) and proved with GNATprove.
owasp/secure-headers-projectOWASP knowledge base and validator for HTTP security response headers, providing recommendations, statistics, and automated configuration checks.
capture0x/aws-pentestAutomated AWS security assessment CLI with 30 modules covering IAM privilege escalation, S3 exposure, compute, network, logging and misconfiguration…
iana-org/get-trust-anchorTool for fetching/refreshing DNS Root Zone trust anchors
oscerd/cve-2026-80344Runnable proof-of-concept reproducer for CVE-2026-80344 in Apache Camel camel-as2, demonstrating asynchronous MDN SSRF and credential disclosure with…
oscerd/cve-2026-83531Runnable Spring Boot proof-of-concept for CVE-2026-83531, demonstrating expression-language injection in Apache Camel's dynamic-router-control…
oscerd/cve-2026-84180Runnable Spring Boot and Quarkus reproducers for CVE-2026-84180, demonstrating camel-knative HTTP consumer exception leakage and verifying the…
oscerd/cve-2026-84181Runnable Spring Boot and Quarkus proof-of-concept reproducing the Apache Camel camel-shiro thread-bound-subject authentication bypass, with affected…
oscerd/cve-2026-85243Runnable Spring Boot and Quarkus proof-of-concept for CVE-2026-85243, demonstrating the Apache Camel camel-crypto-pgp integrity-verification…
oscerd/cve-2026-85245Runnable Spring Boot proof-of-concept reproducing CVE-2026-85245, a camel-thrift cross-exchange data disclosure, with affected vs fixed comparison…
oscerd/cve-2026-85246Runnable Spring Boot reproducer for CVE-2026-85246, demonstrating camel-mina consumer exception disclosure over the socket and verifying the…
