akca
akha-security/akcaEvidence-oriented DAST scanner in Go that crawls web apps and APIs, then runs adaptive SQLi, XSS, RCE, SSRF, and auth checks with replayable proof.
api-security-testingdefensive-toolsdynamic-analysis-sandboxing+9
akha-security/akcaEvidence-oriented DAST scanner in Go that crawls web apps and APIs, then runs adaptive SQLi, XSS, RCE, SSRF, and auth checks with replayable proof.
atomdrift-project/scan0-day malware detection for binaries, source & scripts (that doesn't suck)
les-k/wp-secure-mcpA WordPress plugin exposing an MCP server over the REST API, with the security model as the point -- closes the CVE-2026-15015 OAuth-bypass shape by…
pushkarreddyy/radioguardZero-Trust Cellular Defense Sub-Service for Android (IMSI-Catcher, 2G SMS Blaster, and 4G aLTEr Detection & Safe Routing)
s3v3n-jg/cve-2026-76460Educational Flask lab simulating CVE-2026-76460 authentication bypass, with vulnerable, secure, and strict modes plus a PoC exploit script and…
off-by-1-labs/flawedFix-Like Artifacts With Embedded Defects
yolkfull/cve-2026-52910-pocRace reproducer and stress toolkit for CVE-2026-52910, a Linux kernel use-after-free in reuseport cBPF selector programs, with dmesg and leak checks.
lumoslab-innovation/openhunteraiLocal-first AI red team for web, API, and LLM application security. Attacker-style reasoning, evidence-backed findings, and skills for AI coding…
diegoarias008/cve-2026-20079-checkerRead-only Python checker that validates CVE-2026-20079 Cisco FMC authentication-bypass behavior by comparing unauthenticated and csm_processes…
owasp-noir/alibiCross-check the views of your attack surface and find the endpoints that cannot corroborate each other.
nrnw/cve-2026-24061-gnu-inetutils-telnet-detectorA passive detection tool for identifying potential exposure to CVE-2026-24061 in GNU inetutils telnet installations
p0pr0ck5/lua-resty-wafHigh-performance WAF built on the OpenResty stack
snort3/snort3Multi-threaded network intrusion detection and prevention system with rule-based detection, protocol-aware inspection, and pcap analysis for…
42crunch/api-security-audit-actionAutomates static API security auditing of OpenAPI contracts in CI/CD, running 300+ checks for authentication, authorization, and data constraints,…
davidcarliez/coverKeep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow.
ubitquity/metabase-setup-endpoint-sqli-fixFixes unauthenticated SQL injection in a setup endpoint by replacing raw JDBC queries with ORM parameterization and constant-time token validation.
huzjie/aegisagentRuntime security gateway for AI agents: cryptographically attests tool calls, enforces policies, sandboxes execution, and logs tamper-evident audit…
pizlonator/fil-cFil-C: completely compatible memory safety for C and C++