#1Dependency scanning, SBOM generation, package integrity, and supply chain risk tools.
Kitploit recommended
jfrog/text4shell-toolsDetect and patch vulnerable Apache Commons Text in Java JAR/WAR artifacts; fingerprint classes and scan bytecode for CVE-2022-42889 (Text4Shell) call…
bkuan001/halo-recordTamper-evident audit trails for AI agents: hash-chained Runtime Records, dependency-free, verifiable by anyone.
owasp/sedatedSEDATED® Project (Sensitive Enterprise Data Analyzer To Eliminate Disclosure)
firelock-ai/kinSemantic graph-based version control for AI-written code. Tracks entities and relations instead of file diffs, enabling blast radius analysis, shadow…
kulkansecurity/gitxrayA multifaceted security tool which leverages Public GitHub REST APIs for OSINT, Forensics, Pentesting and more.
owasp/packmanA documentation and tracking project with the goal of making package management systems more secure.
knqyf263/go-rpmdbRPM DB bindings for go
momenbasel/malware-checkStatic and dynamic analysis tool for detecting malicious code, suspicious binaries, and privacy violations
synacktiv/depfuzzerScans project dependencies for dependency confusion vulnerabilities and checks package owner email takeover risks across multiple registries (npm,…
metaredteam/rtx-cve-2023-45779Proof-of-concept code for Android APEX key reuse vulnerability
gadievron/honeyslopCode canaries to quickly triage hallucinated ('slop') vulnerability reports
advanced-threat-research/creosoteCreosote is our solution to searching for the tarfile vulnerability described by CVE-2007-4559.
robertdfrench/ifuncd-upGNU IFUNC is the real culprit behind CVE-2024-3094
wavestone-cdt/defcon-cicd-pipelines-workshopHands-on CI/CD pipeline security workshop with Terraform lab, AWS exploitation, Kubernetes escape, and artifact backdooring exercises for offensive…
authomize/log4j-log4shell-affectedLists of affected components and affected apps/vendors by CVE-2021-44228 (aka Log4shell or Log4j RCE). This list is meant as a resource for security…
s0ld13rr/claude-code-backdoorBackdooring Claude Code via hooks in settings.json. Authorized use only!
aquasecurity/trivy-java-dbBuilds a SQLite database of Maven artifacts (ArtifactID, GroupID, Version, SHA1) for Trivy's Java component vulnerability detection, enabling scans…
arsbr/veritensorThe Anti-Virus for AI Artifacts & RAG Firewall. A static analysis tool scanning Models and Notebooks for RCE, Datasets and RAG docs for Data…
