Tools

a1ex-var1amov/ctf-cve-2019-11043

Intentionally vulnerable PHP app with Nginx/PHP-FPM setup for reproducing CVE-2019-11043, including Docker and Kubernetes deployment,…

pii-shield/pii-shield

Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️

paradigmxyz/iron-proxy

An egress firewall for untrusted workloads.

bbo513/cve-2023-7231

PoC and Disclosure for CVE-2023-7231 – Memcached Gopher RCE chain

twistlock/whoc

A container image that exfiltrates the underlying container runtime to a remote server

spiralbl0ck/cve-2023-1206-cve-2025-40040-cve-2024-49882

3 linux kernel bugs chains to do secure comm app using side channel to establish key and establish covert channe;

borenstein/yolo-cage

AI coding agents that can't exfiltrate secrets or merge their own PRs.

data-privacy-stack/presidio

An open-source framework for detecting, redacting, masking, and anonymizing sensitive data (PII) across text, images, and structured data. Supports…

rhinosecuritylabs/pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

legendile7/cve-2026-78122-poc

Proof-of-concept exploit for CVE-2026-78122, demonstrating container filesystem and environment variable exfiltration through docker-socket-proxy's…

george0papasotiriou/cve-2026-21002-serverless-cold-start-credential-leakage-via-reused-tmp

PoC exploit for CVE-2026-21002 serverless cold-start credential leakage, demonstrating how reused Lambda /tmp directories expose AWS secrets to other…

4nuxd/react2shell

R2S is a comprehensive exploitation and post-exploitation framework targeting the Next.js React Server Components vulnerability (CVE-2025-55182). It…

dagrz/aws_pwn

A collection of AWS penetration testing junk

thingsboard/thingsboard

Open-source IoT Platform - Device management, data collection, processing and visualization.