shoucheng3/asf__nifi_cve-2023-34468_1-21-00Exploit for Apache NiFi CVE-2023-34468, targeting a vulnerability in versions 1.21.0 and earlier to demonstrate data access and system compromise.
shoucheng3/apache__nifi_cve-2022-33140_1-16-22Automated data flow processing and distribution system with secure configuration, provenance tracking, and extensible plugin architecture for…
shoucheng3/asf__nifi_cve-2023-36542_1-22-0Automated data flow platform for processing and distributing data with built-in provenance tracking, secure configuration, and scalable pipeline…
epsylon/prommetrixA utility for extracting system and application metrics from unprotected Prometheus Node Exporter HTTP endpoints, used to identify misconfigurations…
rtvkiz/minimalCVE-hardened, minimal container images built from source with cosign signatures, SPDX SBOMs, and SLSA Level 3 provenance. Free, MIT-licensed, rebuilt…
shiftleftsecurity/sast-scanScan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependencies. CI and…
wazuh/wazuhOpen-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…
cilium/tetragoneBPF-based Security Observability and Runtime Enforcement
jonrau1/electriceyeMulti-cloud and SaaS security posture management CLI tool performing 1000+ automated checks across 100+ services for asset management, attack surface…
ttlab-research/awesome-wazuh🛡️Awesome lists about all kinds of interesting topics of Wazuh XDR/SIEM
404tk/cloudtoolkitAuthorized cloud adversary simulation and validation toolkit
kubearmor/kubearmorRuntime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF,…
cloud-gouv/securixHardened NixOS-based operating system with ANSSI-compliant security policies, TPM2/Yubikey authentication, full-disk encryption, Secure Boot…
graphenex/graphenexAutomated framework for system hardening via modular commands. Secures Linux/Windows by reducing attack surface through firewall, user, network,…
mrk336/from-foothold-to-domain-admin-weaponizing-cve-2025-54918-in-real-world-devopsSimulated exploitation and mitigation of CVE-2025-54918 (Windows NTLM flaw). Includes detection scripts, Ansible patching, and CI/CD hardening.…
fevar54/cve-2026-48172---litespeed-cpanel-plugin-version-auditorThis script safely checks the local version of the LiteSpeed cPanel plugin to determine if the system is running a version vulnerable to…
gregaskew/speculativeexecutionassessmentAssesses a system for the "speculative execution" vulnerabilities described in CVE-2017-5715, CVE-2017-5753, CVE-2017-5754
zenzue/cve-2024-6387-mitigationStep-by-step guide to mitigate CVE-2024-6387 in OpenSSH via LoginGraceTime configuration or patching, with verification commands for system…
