threatmap
bogdanticu88/threatmapIaC threat modeler with STRIDE, MITRE ATT&CK, and PASTA frameworks. REST API, GraphQL, and Docker support for Terraform, CloudFormation, and…
api-securitycloud-securityconfiguration-auditing+5
bogdanticu88/threatmapIaC threat modeler with STRIDE, MITRE ATT&CK, and PASTA frameworks. REST API, GraphQL, and Docker support for Terraform, CloudFormation, and…
joelgmsec/azuregraphPowerShell tool for enumerating Azure AD users, devices, applications, and domains via Microsoft Graph API, with offline data export capability.
inflightsec/agent-vault-proxyJust-in-time API keys for AI agents - and any other process you route through it: the caller only ever sees a placeholder.
nixwizard/kube-alienAutomated Kubernetes cluster penetration testing tool that exploits misconfigurations in API, Kubelet, etcd, and Dashboard to achieve node takeover…
zolderio/token-proxyA transparent PII redaction proxy for LLM API traffic. Sits between an application and an LLM provider (currently Anthropic), pseudonymizing…
boxed-dev/vibe-coding-securityPre-launch security checklist for AI-generated apps (Lovable, v0, Bolt, Cursor). 69 checks covering Supabase RLS, exposed keys, and prompt injection.…
anee769/conduitOn-prem API gateway for AI coding agents with per-engineer cost attribution, hard budgets, egress governance (secrets/entity scanning), context-rot…
zenzue/cve-2025-9074Proof-of-concept exploit for CVE-2025-9074 demonstrating container-to-host file write via exposed Docker Engine API on Windows. For authorized…
shaoshi17/cve-2025-9074-docker-exploit一个功能强大的 Docker 远程 API 漏洞利用工具，用于 CVE-2025-9074 漏洞的安全研究和测试。
0xrlawrence/pribadoZero-knowledge privacy platform for confidential API key management, encrypted vault, and secure chat. Built on Oasis Sapphire TEEs
murataydemir/cve-2021-21975[CVE-2021-21975] VMware vRealize Operations Manager API Server Side Request Forgery (SSRF)
ssst0n3/poc-cve-2024-0132Proof-of-concept exploit for CVE-2024-0132 enabling container escape via NVIDIA container toolkit, allowing host filesystem access and Docker daemon…
reverseclabs/azuredevops-enumRead-only Azure DevOps enumeration tool that queries the REST API to surface projects, repositories, service connections, builds, pipeline secrets,…
sam00/poc-cve-2026-42826-2026-42826-microsoft-azure-devops-information-disclosure-vulnerabilityExploits CVE-2026-42826 to enumerate and extract sensitive Azure DevOps data via unauthenticated REST API requests: pipeline YAML, variable groups,…
biutrap/cve-2026-64849Proof-of-concept exploit for CVE-2026-64849: triggers SSRF in MLflow webhook API via crafted POST, fetching cloud instance metadata from…
ptechamanja/cve-2025-9074-docker-desktop-container-escapeProof of concept exploit for CVE-2025-9074 - Unauthenticated Docker Engine API container escape affecting Docker Desktop < 4.44.3 on Windows and…
owasp/agent-skills-security-standardSecurity standard for agent skills, providing guidelines and best practices to secure AI-driven autonomous agents in cloud and API environments.
stuartcarroll/citrixadc-cve-2020-8300Detect Citrix ADC SAML action or SAML iDP Profile config vulnerable to CVE-2020-8300 using Citrix ADC NITRO API