Tools

franksec42/mongobleed-exploit-cve-2025-14847

Explot, Lab, Scanner - external and docker container, for SMongobleed-CVE-2025-14847 plus phoenix security uploader

dumbmachine/cloud-doctor

One command grades your whole cloud account — misconfigurations, missing observability, and security posture.

reyjesusq/sentinel-mcp

Autonomous AI-powered cyber defense system using MCP, Gemini 2.0 Flash, Dynatrace observability and MongoDB. Google Cloud Hackathon submission.

surendrapuppala7/cve-2025-45955

Proof-of-concept exploit for CVE-2025-45955 demonstrating Server-Side Request Forgery (SSRF) in DonWeb Ferozo hosting platform, enabling internal…

fevar54/cve-2026-48172---litespeed-cpanel-plugin-version-auditor

Auditor de version para CVE-2026-48172: verifica localmente si el plugin LiteSpeed de cPanel es vulnerable, sin explotar.

gina-alaska/bash-cve-2014-7169-cookbook

Chef cookbook to detect and patch the Shellshock (CVE-2014-7169) bash vulnerability across servers using automated configuration management.

openclarity/kubeclarity

KubeClarity is a tool for detection and management of Software Bill Of Materials (SBOM) and vulnerabilities of container images and filesystems

ovotech/gitoops

all paths lead to clouds

skyscanner/lambdaguard

AWS Serverless Security

mandiant/azure_workshop

Terraform-deployable vulnerable-by-design Azure lab with realistic attack paths and common misconfigurations for practicing red teaming and security…

grapl-security/grapl

Graph platform for Detection and Response

temp43487580/entrapassthecert

tool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it

grines/scour

Module-based AWS exploitation framework for red team testing and blue team analysis. Emulates attack patterns in the AWS control plane with unique UA…