#1Tools for blue team, defensive security, and threat protection.
Kitploit recommended
blackvectorops/semantic_firewallGenerate deterministic semantic fingerprints for Go functions. Detect xz-style backdoors and verify semantic equivalence using Static Single…
oscerd/cve-2026-78162Runnable proof-of-concept reproducer for CVE-2026-78162, demonstrating unauthenticated Java deserialization in Apache Camel camel-hazelcast across…
oscerd/cve-2026-78164Runnable proof-of-concept for CVE-2026-78164, demonstrating secret leakage when Apache Camel HTTP producers resolve property placeholders in…
oscerd/cve-2026-78165Runnable proof-of-concept reproducer for CVE-2026-78165, demonstrating unfiltered JDK deserialization of Redis PUBLISH payloads in Apache Camel…
oscerd/cve-2026-79983Runnable proof-of-concept reproducer for CVE-2026-79983, a path traversal in Apache Camel camel-ftp consumers, with malicious FTP server fixtures and…
oscerd/cve-2026-79984Runnable proof-of-concept reproducer for CVE-2026-79984, a path traversal in Apache Camel camel-mina-sftp, with malicious SFTP server fixtures and…
oscerd/cve-2026-79985Reproducer and analysis for CVE-2026-79985, a path traversal in Apache Camel camel-smb where share-listing names bypass directory containment, with…
oyesanyf/oshoosiclawAutonomous Rust endpoint security agent combining Ring-0 Windows driver and Linux eBPF pre-execution blocking, YARA detection, MITRE ATT&CK mapping,…
jaime64net/debuggerj-Debugger de aplicaciones x86 y x64 con intgracion de AI
0xblackash/cve-2026-110912Python/scapy proof-of-concept for CVE-2026-110912 (ARPBleed), an ARP ar_hln/ar_pln out-of-bounds read in DragonFly BSD that leaks kernel heap and…
owasp/piihunterScans PostgreSQL databases and Jira issues for PII using regex, NER/ML, and optional self-hosted LLM detection, with redacted reports and audit…
owasp/secretsifterOWASP Incubator project: detects credentials exposed in browser-delivered content (JavaScript, config responses, live traffic).
mceeomoba/apex-kev-change-deskOffline CISA KEV snapshot comparison for field-level change review. Free prototype, not a security assessment. AI-assisted development.
abraxas/pfsense-api-example-ssl-verifypfSense Plus MIM API toolkit b4acd7ca - Medium - Remote - Privilege leftover - official samples verify_ssl=False
rianjuniorsf/analysis-and-poc-n8n-cve-2025-68613Technical study of the CVE-2025-68613 vulnerability in n8n, covering affected versions, laboratory exploration scenario, offensive and defensive…
gmh5225/maldec-edrUnix endpoint detection and response solution using kernel-level mechanisms to detect anomalies and malware attacks in real time.
gmh5225/malicious-code-detection-buguAI-based malicious code detection and obfuscation system with microservices for detection, packing, and code confusion, plus user and admin services.
gmh5225/mapped-dumperA program written in C++ for remotely dumping manual mapped modules.
