Tools

nuguardai/nuguard

opensource repo for validating agentic AI applications: redteam, behavior, supply-chain, static analysis

promptfoo/modelaudit

Security scanner for AI/ML model files. Detects malicious code, backdoors, and vulnerabilities before deployment

arsbr/veritensor

The Anti-Virus for AI Artifacts & RAG Firewall. A static analysis tool scanning Models and Notebooks for RCE, Datasets and RAG docs for Data…

iulianvostrut/contexthound

Static analysis CLI that scans codebases for LLM prompt-injection, data-exfiltration, jailbreak, and unsafe agent/tool vulnerabilities. Runs fully…

george0papasotiriou/cve-2026-9997-vpn-split-tunneling-bypass-via-dhcp-option-injection

Rogue DHCP server for CVE-2026-9997: injects Option 121 static routes into VPN clients, bypassing split tunneling to exfiltrate sensitive traffic.

jricramc/aigate

AI Prompt Secret Scanner: local proxy and Claude Code hook that blocks secrets before they reach AI APIs

byt3bl33d3r/offensivenim

My experiments in weaponizing Nim (https://nim-lang.org/)

papermtn/gitlab-watchman

Finding exposed secrets and personal data in GitLab

0xmrma/cve-2026-5061

Consul Template validated where a symlink pointed during template evaluation, but its later dependency fetch read the original path. Retargeting the…

securing/dumpsterdiver

Tool to search secrets in various filetypes.