#1Tools for blue team, defensive security, and threat protection.
Kitploit recommended
dov3y/cve-2022-30190-asr-senintel-process-pickupPicking up processes that have triggered ASR related to CVE-2022-30190
shambhavim18/cve-2019-15107-labDocker-based lab demonstrating CVE-2019-15107, the Webmin unauthenticated RCE, covering deployment, exploitation, detection, and remediation.
deepanshu-khurana/cve-2023-43804Containerized three-tier lab reproducing CVE-2023-43804 urllib3 cookie leak via cross-origin redirects, with exploit script and patch verification.
amulyakaushik/cve-2023-27163-labDocker-based lab reproducing CVE-2023-27163 SSRF in Request-Baskets, with exploitation verification, detection script, and network-isolation…
hashgraph-online/hol-guardOpen-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at…
thrilokh-q123/cve-2025-23134_fixes_codeThe ASN1_STRING_set() function takes an `int` length, make sure the argument is not inadvertently truncated when it is called from asn1_ex_c2i().
suominen/cve-2026-53266Single-page tracker recording which Linux distributions have shipped fixes for the CVE-2026-53266 netfilter ebtables SNAT ARP-rewrite page-cache…
xiaoqimikko/async-http-client-checkSelf-hosted AI workspace with agents, skills, and tools (Gmail, Calendar) that runs entirely on your own provider API keys (BYOK). Bring your own…
crypt0p3g/adnullenumOne-pass anonymous Active Directory enumeration over SAMR and LSARPC — null session, no credentials, with structured reusable output.
soc-irdoc/irdoc-appIncident Response Documentation Platform
clearlotus-git/cve-2024-37054-pocProof-of-concept and research repository for CVE-2024-37054, an unsafe deserialization flaw in MLflow PyFunc model loading that can lead to remote…
shentao83/news-8.6.0-cve-2026-8726-backportMinimal security backport for CVE-2026-8726 in georgringer/news 8.6.0
oisf/libhtpSecurity-aware HTTP protocol parser library used by IDS/IPS engines to inspect and normalize HTTP traffic for threat detection.
swiftdevcollective/xcodeprojectsecurityA macOS app to scan Xcode project files for possible security issues.
mcpmark-eval-liuhezi/log4shell-auditLog4Shell (CVE-2021-44228) security review documentation and advisory triage
hex0user/cve-2026-4282-scannerNon-intrusive version-based vulnerability scanner for CVE-2026-4282 (Keycloak SingleUseObjectProvider isolation flaw enabling authorization code…
hex0user/cve-2026-1731Python scanner that passively fingerprints exposed BeyondTrust Remote Support and Privileged Remote Access services to detect potential CVE-2026-1731…
ghoxtbyte/cve-2026-18464Security advisory and technical research notes for CVE-2026-18464, an unauthenticated denial-of-service flaw in the WP Maps Pro WordPress plugin…
