Tools

checkmarx/kics

Static analysis scanner for infrastructure-as-code that detects security vulnerabilities, compliance violations, and misconfigurations across…

aquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

sqlancer/sqlancer

Automated testing to find logic and performance bugs in database systems

semgrep/semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

ron190/jsql-injection

Automated SQL injection detection and exploitation tool for extracting database information from web applications, supporting multiple injection…

nonameerror/mongobleed---cve-2025-14847-poc-

This repo contains my python script version of CVE-2025-14847 (MongoBleed)

rick2600/redis-stack-cve-2024-55656

Proof-of-concept exploit for CVE-2024-55656, an integer overflow in RedisBloom leading to heap-based OOB read/write and remote code execution in…

trailofbits/not-going-anywhere

Intentionally vulnerable Golang programs exposing web, gRPC, and database/sql flaws for security training, vulnerability discovery, and remediation…

woj-ciech/leaklooker

Find open databases - Powered by Binaryedge.io

johntroony/blisqy

Version 0.2 - Exploit Time-based blind-SQL injection in HTTP-Headers (MySQL/MariaDB).