hybridbrothers/hunting-queries-detection-rulesThe purpose of this repository is to share KQL queries to help identify security misconfigurations, hunt for specific patterns, or detect malicious…
mightysai1997/cve-2024-3094Shell scripts to detect CVE-2024-3094 backdoor in liblzma5 across Kubernetes pods and Docker containers, with SBOM generation via Trivy for…
teyhouse/cve-2024-3094K8S and Docker Vulnerability Check for CVE-2024-3094
ash1996x/cve-2025-54914-pocExploit for CVE-2025-54914 in Azure Networking, creating malicious routes with evasion, persistence, multi-target scanning, and reporting for…
spiarh/webhook-cve-2022-0811Simple webhook to block exploitation of CVE-2022-0811
rsalmond/cve-2021-34824reproducing an old istio bug
leebaird/discoverCustom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload…
aws-samples/drs-malware-scanPerform file-based malware scan on your on-prem servers with AWS
gdatasoftwareag/vaasVerdict-as-a-Service SDKs: Analyze files for malicious content
alteredsecurity/365-stealerAutomates Illicit Consent Grant attacks against Azure/O365 tenants to steal refresh tokens, exfiltrate emails/OneDrive data, and create malicious…
safedep/pmgPMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.
praetorian-inc/oauthseekerA malicious OAuth application that can be leveraged for both internal and external phishing attacks targeting Microsoft Azure and Office365 users.
sublime-security/ics-phishing-toolkitOpen source tooling to stop ICS phishing (malicious calendar invites)
george0papasotiriou/cve-2026-22015-serverless-function-environment-variable-injection-via-eventPoC for CVE-2026-22015: malicious event injects environment variables into serverless functions, overwriting secrets and enabling privilege…
666asd/cve-2024-23653Proof-of-concept demonstrating CVE-2024-23653, a BuildKit container escape via a malicious Dockerfile frontend, using buildctl to inspect process…
frigatecaptain/openclaw_vulnerabilities_and_solutions> OpenClaw security audit and hardened deployment guide — known vulnerabilities (CVE-2026-25253, malicious skills, credential leakage), architectural…
devopstoday11/tarianAnti-Virus for K8s. Protect your Applications running on Kubernetes from malicious attacks with pre-registered source code, runtime processes…
chhhd/cve-2025-1974Proof-of-concept exploit for CVE-2025-1974 (IngressNightmare) targeting Kubernetes Ingress-NGINX Admission Controller to achieve remote code…
