Tools

clidey/deptrust

CLI and MCP server that checks package versions for known vulnerabilities across 14+ ecosystems including npm, PyPI, crates.io, Go modules, and…

pingidentity/ldapsdk

UnboundID LDAP SDK for Java

fusionauth/fusionauth-samlv2

SAML v2.0 bindings in Java using JAXB

george0papasotiriou/cve-2026-3456-oauth2-pkce-race-condition-account-takeover-

Python PoC for CVE-2026-3456 demonstrating OAuth2 PKCE race-condition account takeover, with a vulnerable auth server and concurrent code-verifier…

rabbitsafe/cve-2021-37580

Proof-of-concept exploit for Apache ShenYu Admin JWT authentication bypass (CVE-2021-37580). Includes a scanning script to detect vulnerable…

kaysec/hybrid-submit

A script that automatically submits files to Hybrid Analysis (API)

shoucheng3/esapi__esapi-java-legacy_cve-2022-23457_2-2-3-1

Enterprise Security API library providing security controls for Java web applications, including authentication, access control, input validation,…

shoucheng3/esapi__esapi-java-legacy_cve-2022-24891_2-2-3-1

OWASP Enterprise Security API library providing security controls for Java web applications, including authentication, access control, input…

shoucheng3/apache__incubator-dubbo_cve-2021-30181_2-6-8

High-performance Java RPC and microservices framework with service discovery, traffic management, observability, and built-in security for building…

shoucheng3/fabric8io__kubernetes-client_cve-2021-4178_5-0-2

Java client providing fluent DSL access to Kubernetes and OpenShift REST APIs for managing cloud-native infrastructure, pods, services, and…

shoucheng3/aws__aws-sdk-java_cve-2022-31159_1-12-2600

Java SDK for integrating with Amazon Web Services, providing secure API access to S3, DynamoDB, EC2, and more, with built-in authentication,…

shoucheng3/jenkinsci__script-security-plugin_cve-2023-24422_1228.vd93135a_2fb_25

Jenkins plugin providing script approval workflows and Groovy sandboxing to enforce secure script execution, with ACL-aware permission checks and…

shoucheng3/kubernetes-client__java_cve-2020-8570_client-java-parent-9_0_2_fixed

Java client library for the Kubernetes API, enabling programmatic management of clusters, pods, deployments, and other resources with support for…

shanika04/cloudfoundry_uaa

CVE-2016-4468

softrams/bulwark

An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.

6mile/gimmepatz

Personal Access Token (PAT) recon tool for bug bounty hunters, pentesters & red teams

helixar-ai/mcp-security-checklist

MCP is being adopted rapidly. Security guidance is lagging behind. This checklist gives security engineers, platform teams, and technical leaders a…