Tools

owasp/cve-lite-cli

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix,…

radareorg/r2ai

Radare2 AI plugin using local or remote LLMs for decompilation, function explanation, vulnerability detection, renaming, and scripted reverse…

mahaloz/daila

A decompiler-agnostic plugin for interacting with AI in your decompiler. GPT-4, Claude, and local models supported!

ahaggard2013/binaryninja-ollama

Plugin for Binary Ninja that integrates local Ollama models to rename functions and variables in decompiled HLIL code, preserving privacy by keeping…

codeshield-security/log4jshell-bytecode-detector

Local Bytecode Scanner for the Log4JShell Vulnerability (CVE-2021-44228)

adamsjack711-ux/pkgxray

Pre-install security for AI agents, npm packages, and MCP servers. Zero-dep local static analysis; normal scans never execute package code.

jas502n/cve-2020-26259

CVE-2020-26259: XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has…

abtonc/next-cve-2025-66478

Scans local projects for CVE-2025-66478 vulnerability and reports affected instances without fixing them.

saku0512/cve-2026-72815-poc

Local Go PoC demonstrating CVE-2026-72815, an X-Forwarded-For IP spoofing flaw in go-chi/chi middleware.RealIP that bypasses IP-based ACLs, with a…

fr4nkxixi/cve-2021-26871_poc

Proof-of-concept exploit for CVE-2021-26871, a type confusion vulnerability in Windows WalletService's PROPVARIANT handling, enabling local privilege…

jricramc/aigate

AI Prompt Secret Scanner: local proxy and Claude Code hook that blocks secrets before they reach AI APIs

honeyb33z/cve-2020-11023-scanner

Static analysis scanner for CVE-2020-11023 XSS vulnerabilities in JavaScript. Detects vulnerable jQuery versions and dangerous DOM manipulation…

occamsec/log4j-checker

Bash and PowerShell scripts to scan a local filesystem for Log4j .jar files which could be vulnerable to CVE-2021-44228 aka Log4Shell.

niclas-zone/ctr/gitleaks

Containerized secret scanning tool that detects exposed credentials, API keys, and tokens in Git repositories using regex and entropy-based…

offensive360/mcp-server

MCP server that runs SAST scans on local codebases and returns findings with severity and fixes, enabling AI assistants to perform security analysis…

jaydendancer12/ai-code-review

AI-powered CLI tool that reviews code for security vulnerabilities, bugs, and anti-patterns using LLMs. Supports local and cloud providers, git…

medaz-sploit/cve-2025-64714-privatebin-2.0.2-poc

Proof-of-concept exploit for PrivateBin Local File Inclusion (CVE-2025-64714) via template cookie path traversal, with detection and RCE chaining…

yucaerin/cve-2025-2294

Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion