Vulnerability Analysis

bo0om/fuzz.txt

Potentially dangerous files

pmd/pmd

An extensible multilanguage static code analyzer.

docker/docker-bench-security

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

gh05tcrew/pentestagent

AI agent framework for black-box security testing with autonomous multi-agent orchestration, built-in pentesting tools, and MCP integration for bug…

secwiki/linux-kernel-exploits

linux-kernel-exploits Linux平台提权漏洞集合

bishopfox/unredacter

Never ever ever use pixelation as a redaction technique

daffainfo/allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

a-poc/blueteam-tools

Tools and Techniques for Blue Team / Incident Response

devsecops/awesome-devsecops

An authoritative list of awesome devsecops tools with the help from community experiments and contributions.

hamed233/cybersecurity-mastery-roadmap

A comprehensive, step-by-step guide to mastering cybersecurity from beginner to expert level with curated resources, tools, and career guidance

snyk/cli

Snyk CLI scans and monitors your projects for security vulnerabilities.

blacklanternsecurity/bbot

The recursive internet scanner for hackers. 🧡

ossf/scorecard

OpenSSF Scorecard - Security health metrics for Open Source

zrax/pycdc

C++ python bytecode disassembler and decompiler

commixproject/commix

Automated All-in-One OS Command Injection Exploitation Tool

awslabs/git-secrets

Prevents you from committing secrets and credentials into git repositories

opnsense/core

OPNsense GUI, API and systems backend