#1Tools for blue team, defensive security, and threat protection.
Kitploit recommended
oscerd/cve-2026-85315Runnable proof-of-concept reproducer for CVE-2026-85315, demonstrating camel-grpc consumer exception message disclosure (CWE-209) in Camel Spring…
lsudoko/antibodyGitLab Duo DevSecOps loop where a second AI re-attacks every AI-written fix, saving each successful bypass as a permanent antibody replayed in CI and…
gmh5225/nova-frameworkYARA-inspired prompt pattern matching engine that combines keyword, regex, semantic similarity, and LLM evaluation rules to detect jailbreaks and…
gmh5225/no-access-protection-x86It encrypts the text section and set the protection to NO_ACCESS.
neo23x0/process-watcherA process monitoring tool that tries to detect exploitation
hanxi19/black_hole_attack_for_vector_databaseResearch implementation of the Black-Hole Attack that poisons vector database indexes via centrality-driven hubness, with FAISS pipelines and…
kavryxdev-group/enterprise-abac-gatewayZero-trust reverse proxy and ABAC authorization gateway in Go with embedded OPA policy evaluation and distributed token revocation.
kavryxdev-group/sandboxed-untrusted-code-execution-runnerExecutes untrusted Python, JavaScript, and Bash in a hardened jail with 5-second, 128 MB, 0.5-core, PID and output limits.
ag3ntsc4rn/autorun-auditFind code that runs without you asking: repo files that execute on folder open (VS Code tasks, agent hooks, MCP, devcontainers) and Python…
0xblackash/cve-2026-106173Documents CVE-2026-106173, a path traversal (CWE-22) in Fortinet FortiSIEM, with impact analysis, detection guidance, and mitigation steps for…
oscerd/cve-2026-85312Runnable proof-of-concept reproducer for CVE-2026-85312, demonstrating Apache Camel saga hijacking via the Long-Running-Action header in Spring Boot…
oscerd/cve-2026-85301Runnable proof-of-concept reproducer for the Apache Camel camel-keycloak issuer validation bypass (CWE-287), demonstrating affected and patched…
oscerd/cve-2026-85300Runnable Spring Boot and Quarkus reproducer for CVE-2026-85300, demonstrating camel-pqc writing private keys with permissive umask-derived file…
oscerd/cve-2026-85260Runnable Spring Boot and Quarkus reproducer for CVE-2026-85260, demonstrating camel-mllp PHI logging in affected versions and suppression after the…
oscerd/cve-2026-85257Runnable Spring Boot and Quarkus reproducer for CVE-2026-85257, demonstrating camel-cxf SOAP fault information disclosure and verifying the…
oscerd/cve-2026-85254Runnable Spring Boot and Quarkus reproducer for CVE-2026-85254, demonstrating Apache Camel camel-platform-http header-echo suppression bypass via…
jaksi/sshesameAn easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity
reloading01/certstream-server-rustHigh-performance Certificate Transparency (CT) monitoring tool written in Rust. Real-time stream of newly issued SSL/TLS certificates from CT logs.…
