Tools

shoucheng3/spring-cloud__spring-cloud-config_cve-2020-5410_2-1-8-release

Centralized configuration server for distributed systems with HTTP API, Git-backed storage, property encryption/decryption, and integration with…

shoucheng3/fabric8io__kubernetes-client_cve-2021-4178_5-0-2

Java client providing fluent DSL access to Kubernetes and OpenShift REST APIs for managing cloud-native infrastructure, pods, services, and…

shoucheng3/jenkinsci__script-security-plugin_cve-2023-24422_1228.vd93135a_2fb_25

Jenkins plugin providing script approval workflows and Groovy sandboxing to enforce secure script execution, with ACL-aware permission checks and…

open-policy-agent/opa

Declarative policy engine that enables authorization and policy enforcement across services, Kubernetes, Terraform, Docker, and APIs using the Rego…

rancher/externalip-webhook

CVE-2020-8554: Man in the middle using LoadBalancer or ExternalIPs

synacktiv/kcmapper

KcMapper is a security auditing tool for Keycloak. It exports your Keycloak configuration (realms, clients, users, roles, etc.) into a Neo4j graph…

portswigger/oauth-scan

Burp Suite Extension useful to verify OAUTHv2 and OpenID security

shoucheng3/apache__jspwiki_cve-2019-10078_2_11_0_m4_fixed

Exploit testing repository for Apache JSPWiki CVE-2019-10078, demonstrating a cross-site scripting vulnerability in a Java-based wiki platform with…

zierax/grafana-final-scanner

Grafana scanner with all public CVEs that I collected in one script to make grafana testing easier

decalage2/awesome-security-hardening

A collection of awesome security hardening guides, tools and other resources

pantheon-security/medusa

AI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ hooks, permissions & skills before you clone — plus an…

farenhytee/database-sentinel

Claude Skill that audits your projects for RLS misconfigurations, exposed keys, auth bypasses, and storage vulnerabilities. 27 anti-patterns sourced…

paolokappa/sharepointsecuritymonitor

A comprehensive PowerShell-based SharePoint security monitoring solution with CVE-2025-53770 protection, advanced DLL analysis, threat detection, and…

rodhnin/hephaestus-server-forger

server security auditor scanning Apache, Nginx, and IIS configurations with AI-powered hardening guides and professional reporting.

jonrau1/electriceye

ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting…

adversis/tailsnitch

A security auditor for Tailscale configurations. Scans your tailnet for misconfigurations, overly permissive access controls, and security best…

wadesweaponshed/check-point-trusted-access-review

Local web app for conducting a Check Point Trusted Access Review. This scanner is built specifically to look for configuration issues around…

shoucheng3/apache__jspwiki_cve-2019-10076_2-11-0-m3

Java-based wiki platform with JAAS security integration, access control, and detailed configuration auditing. Includes documentation for…