ephemora-cell
michaels1011/ephemora-cellCapability-based WASM runtime for executing untrusted AI-generated code with enforced CPU, memory, time, I/O, and filesystem limits. Provides…
ai-securityapi-securitycloud-security+4
11
michaels1011/ephemora-cellCapability-based WASM runtime for executing untrusted AI-generated code with enforced CPU, memory, time, I/O, and filesystem limits. Provides…
projectdiscovery/nucleiFast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…
m14r41/pentestingeverythingComplete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network…
seqra/opentaintFormal inter-procedural taint analysis engine for application security. Tracks untrusted data across function boundaries, persistence layers, and…
owasp/java-html-sanitizerTakes third-party HTML and produces HTML that is safe to embed in your web application. Fast and easy to configure.
projectdiscovery/httpxFast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…
cure53/dompurifyDOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of…
commando-x/vuln-bankIntentionally vulnerable banking platform for practicing web application, API, and AI/LLM security testing, secure code review, and DevSecOps…
lucksec/spring-cloud-gateway-cve-2022-22947Exploit for CVE-2022-22947: remote code execution in Spring Cloud Gateway via crafted requests to the Actuator endpoint. Includes Python script and…
n7on/dllspyDiscover input surfaces and security issues in compiled .NET assemblies — without running them.
p0pr0ck5/lua-ffi-libinjectionLuaJIT FFI bindings for libinjection, providing SQL injection and XSS detection with context-specific APIs for web application security.
ntanwir10/guardscan100% Free & Open Source • Privacy-First Security Scanning and AI Code Review CLI
jricramc/aigateAI Prompt Secret Scanner: local proxy and Claude Code hook that blocks secrets before they reach AI APIs
jzheaux/cve-2023-34035-mitigationsDemonstrates CVE-2023-34035 vulnerability in Spring Security with vulnerable and mitigated sample applications, teaching proper servlet mapping and…
arzaan789/keyguardScan codebases and GCP projects for exposed API credentials
cyberwulfy200-dev/cve-2026-0915-json-patch.-v2.0Enterprise-grade JSON validator security patch that fixes CVE-2026-0915 with strict schema validation, input sanitization, rate limiting, and…
shoucheng3/nahsra__antisamy_cve-2016-10006_1-5-3Fast, configurable HTML sanitization library for preventing XSS and malicious code injection from untrusted user input. Provides a policy-driven API…
shoucheng3/apache__sling-org-apache-sling-xss_cve-2016-5394_1-0-8Java library providing XSS escaping and filtering services (XSSAPI, XSSFilter) to sanitize user-submitted content and prevent cross-site scripting…