#1Dependency scanning, SBOM generation, package integrity, and supply chain risk tools.
Kitploit recommended
getagentseal/agentsealSecurity toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor for supply chain attacks, test prompt injection…
danielruf/snyk-js-jquery-174006patches for SNYK-JS-JQUERY-174006, CVE-2019-11358, CVE-2019-5428
google/osv.devOpen source vulnerability DB and triage service.
heroku/terrierTerrier is a Image and Container analysis tool that can be used to scan Images and Containers to identify and verify the presence of specific files…
owasp/wrongsecrets-binariesSource code for the Binaries of OWASP WrongSecrets
navikt/cpltSandbox for AI coding agents. Runs Copilot CLI, Claude Code, OpenCode, Gemini CLI, Antigravity, Pi, goose or a plain shell inside a kernel-level…
owasp/vulnreachRuntime-aware SCA — proves which CVEs are actually reachable, not just installed.
oxydev2/clearml-cve-2024-24590Proof of concept for CVE-2024-24590
aquasecurity/chain-benchAudits software supply chain security compliance against the CIS benchmark, scanning SCM settings, branch protections, dependencies, and CI/CD…
owasp/software-component-verification-standardSoftware Component Verification Standard (SCVS)
ossf/allstarGitHub App to set and enforce security policies
fox-it/log4j-finderFind vulnerable Log4j2 versions on disk and also inside Java Archive Files (Log4Shell CVE-2021-44228, CVE-2021-45046, CVE-2021-45105)
tin-z/solidity_cve-2021-42574-pocPOC of CVE-2021-42574 for solidity and solc compiler
vercel-labs/fix-react2shell-nextOne command to fix CVE-2025-66478 (React 2 Shell RCE) in your Next.js / React RSC app.
kavan00/android-projector-c2-malwareBreakdown of a c2-network of chinese beamers - SilentSDK-Analysis
morpheuslord/startup-sbomA tool to reverse engineer and inspect the RPM and APT databases to list all the packages along with executables, service, versions and CVE.
mubix/ai-ctfLocal AI Capture-the-Flag platform with guided lessons on prompt injection, tool-call abuse, and OSINT against six simulated chatbot personas.
