Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.
stackrox/stackroxThe StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides…
guilherme-grimm/graph-gosimply nodes and graphs
aquasecurity/vuln-list-redhatRed Hat security advisories
nebusec/cybermeowfiaPoCs and exploits for CVEs discovered by NebuSec.
erocarrera/pefilepefile is a Python module to read and work with PE (Portable Executable) files
blacksky-algorithms/atprotoFork of the AT Protocol reference implementation with performance-optimized AppView, Rust-based firehose indexer, Redis caching, and community…
bishopfox/cloudfoxAutomating situational awareness for cloud penetration tests.
aquasecurity/vuln-list-debianDebian Security Tracker
aquasecurity/vuln-list-nvdNVD
opensource-arrozconpollo191/cve-2026-41089-netlogon-rceScan Windows Domain Controllers for CVE-2026-41089 to detect unauthenticated remote code execution vulnerabilities in the Netlogon service.
owasp/appsec-agentA TypeScript package that provides AI-powered agents for Application Security (AppSec) tasks, built on top of the frontier models.
praetorian-inc/brutusFast, zero-dependency credential testing tool in Go. Brute force SSH, MySQL, PostgreSQL, Redis, MongoDB, SMB, and 20+ protocols. Hydra alternative…
obrunolima1910/cve-2026-24061🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.
mogenius/renovate-operatorOperator to streamline renovate executions in Kubernetes
owasp/opencreInteractive platform linking security standards and guidelines for designing, developing, testing, and procuring secure software. Provides a unified…
aerleon/aerleonGenerate firewall ACLs for Cisco, Juniper, Palo Alto, and more from a single YAML policy language via CLI or Python API.
