hvt
affolter-engineering/hvtRust CLI that probes HTTP methods (including WebDAV and DeltaV verbs) against a target URL to surface verb tampering, access-control bypasses, and…
api-security-testingconfiguration-auditingmisconfiguration+5
2
affolter-engineering/hvtRust CLI that probes HTTP methods (including WebDAV and DeltaV verbs) against a target URL to surface verb tampering, access-control bypasses, and…
kavryxdev-group/sandboxed-untrusted-code-execution-runnerExecutes untrusted Python, JavaScript, and Bash in a hardened jail with 5-second, 128 MB, 0.5-core, PID and output limits.
swastiksagar/wazuhlabprojectHands-on Wazuh SIEM/XDR home lab covering OVA deployment, agent enrollment, file integrity monitoring, VirusTotal malware detection, and MITRE ATT&CK…
buybitart/cloudflare-security-artCloudflare Free Plan security rules (Zero Trust approach) for small websites
andresriancho/enumerate-iamEnumerate the permissions associated with AWS credential set
nu11secur1ty/ciscoSecurity auditing toolkit for Cisco network devices, focusing on configuration review, vulnerability detection, and penetration testing of enterprise…
itskill-jp/wordpress-upgrade-checkRead-only check of every WordPress core version on a server. Flags CVE-2026-87902 (fixed in 7.1.2 and backports), auto-updates turned off, and…
philippeabraxas-jpg/tbp-networkTheory and implemantation of the TBP protocol to secure networked AI in small to open web networks
vpierre/ndaal_public_sbom_auditorOffline single-binary web app that ingests CycloneDX, SPDX and syft SBOMs, runs an ensemble of CVE scanners, enriches findings with EPSS, CISA-KEV…
ivankovic/stop-botsAutomate stopping bad bots from accessing your server
owasp-noir/alibiCross-check the views of your attack surface and find the endpoints that cannot corroborate each other.
jithinkrishnanrs/stylesmuggler-ioc-toolkitStyleSmuggler (CVE-2026-75650) IOC toolkit for Magento Open Source and Adobe Commerce. Detect compromised stores, Rust implants, PHP web shells,…
safeagent-beihang/clawguardEnterprise AI agent security toolkit providing pre-flight auditing, configuration hardening, runtime threat detection, and active defense against…
dev-sec/puppet-os-hardeningThis puppet module provides numerous security-related configurations, providing all-round base protection.
execution-py/cve-2026-9055Defensive analysis of CVE-2026-9055, an unauthenticated privilege escalation in Amelia WordPress booking plugin. Provides root cause breakdown,…
ssc-ict-innovatie/nl-kat-coordinationModular network scanning framework that integrates diverse tools and external databases to detect vulnerabilities and configuration errors, producing…
plutosecurity/mcpwnfluenceInformation about CVE-2026-27825 & CVE-2026-27826 discovered by Pluto Security and a bash script for identifying vulnerable mcp-atlassian instances…
nrnw/cve-2026-24061-gnu-inetutils-telnet-detectorA passive detection tool for identifying potential exposure to CVE-2026-24061 in GNU inetutils telnet installations