microsoft/azurelinuxHardened, Azure-optimized Linux distribution built from Fedora sources with RPM packaging, supply chain security, and declarative configuration for…
bytedance/elkeidElkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It…
provos/ironcurtainA secure* runtime for autonomous AI agents. Policy from plain-English constitutions. (*https://ironcurtain.dev)
safedep/pmgPMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.
eeriedusk/nysmeBPF-based stealth container that hides processes, sockets, eBPF objects, and audit logs from system monitoring tools, enabling covert…
nccgroup/conmachiContainer Blackbox Security Auditing Tool: enumerates security configuration from within the target container
mitos-run/mitosMillisecond microVM sandbox forking for AI agents on Kubernetes. Firecracker VMs that restore from memory snapshots in milliseconds, fork a running…
angelorc/vmsanFirecracker made simple. Spin up secure microVMs in milliseconds, from install to interactive shell in one command.
dtact/divd-2021-00038--log4j-scannerScan systems and docker images for potential log4j vulnerabilities. Able to patch (remove JndiLookup.class) from layered archives. Will detect…
wenekar/procinfoGet process information straight from bash, minimal dependencies.
h4wkst3r/dop2mopOpenGraph collector for BloodHound that maps attack paths from DevOps to MLOps infrastructure, collecting CI/CD pipeline, service principal, and ML…
hi-unc1e/cve-2025-1974-pocPoC of CVE-2025-1974, modified from the world-first PoC~
kinryulabs/rootpacket-cve-2026-31431Live cryptojacking toolkit with CVE-2026-31431 LPE exploit, container escape, kernel rootkit, and XMRig Monero miner, captured from real attacks for…
devopstoday11/tarianAnti-Virus for K8s. Protect your Applications running on Kubernetes from malicious attacks with pre-registered source code, runtime processes…
rjhaikal/poc-ingressnightmare-cve-2025-1974POC IngressNightmare (CVE-2025-1974), modified from https://github.com/yoshino-s/CVE-2025-1974
1w4y/ingressnightmare-rce-pocPoC for CVE-2025-1974: Critical RCE in Ingress-NGINX (<v1.12.1) via unsafe config injection. Exploitable from the pod network without credentials,…
shodanwashere/boatcrashExploit for CVE-2019-19030 that affects Harbor versions <1.10.3 and <2.0.1. Can also be used to enumerate and pull public projects from higher…
spanwich/sel4-ics-gateway-demoDefensive security demo: seL4 microkernel gateway protecting vulnerable ICS from CVE-2019-14462
