
AWS-Key-Hunter
[Just for fun] Find exposed AWS keys (VALID KEYS ONLY) on github

[Just for fun] Find exposed AWS keys (VALID KEYS ONLY) on github

Professional Service scripts to aid in the identification of affected Java applications in TeamServer

Hunt for AI coding artifacts containing secrets.

Technical writeup and Proof of Concept (PoC) for CVE-2026-11417: OS Command Injection / Remote Code Execution (RCE) in AWS CDK's NodejsFunction.


The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

The AI Security Verification Standard (AISVS) focuses on providing developers, architects, and security professionals with a structured checklist to…

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependencies. CI and…

RCE exploit toolkit for CVE-2025-55182 and CVE-2025-66478 in React Server Components. Includes multiple exploit variants, detection scripts, a…

Open-source security gateway & static scanner for AI agents. Enforce role-based access control (RBAC), human-in-the-loop approvals, segregation of…

"Sucosh" is an automated Source Code vulnerability scanner and assessment framework for Python(Flask-Django) & NodeJs capable of performing code…

A curated list of resources, practice questions, and study materials to help you prepare for Application Security (AppSec) interviews

Proof-of-concept demonstrating command injection in aws-mcp-server via shell=True, with analysis of the vulnerable code and the fix in v1.7.0.

Maven-based demonstration of CVE-2023-33246 mitigation for Apache RocketMQ, featuring attack testing and enhanced parameter validation to prevent…

Find, verify, and analyze leaked credentials

Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities

A wrapper around grep, to help you grep for things