Tools

wi3memake/react2shell-scanner

Command-line security assessment framework for React and Next.js applications, analyzing React Server Components for misconfigurations, with…

git-rep-src/cved

A tool to manage vulnerable docker containers

hackervlogofficial/cve-2026-23918

This is a proactive tool for security auditing. For your GitHub repository, you’ll want a description that highlights its safety (non-intrusive) and…

nrnw/cve-2026-24061-gnu-inetutils-telnet-detector

A passive detection tool for identifying potential exposure to CVE-2026-24061 in GNU inetutils telnet installations

3pplus/loguccino

Scan and patch tool for CVE-2021-44228 and related log4j concerns.

powerfulseal/powerfulseal

A powerful testing tool for Kubernetes clusters.

stelligent/cfn_nag

Linting tool for CloudFormation templates

falcosecurity/falco

Real-time cloud-native runtime security agent for Linux that monitors syscalls and container/Kubernetes metadata to detect anomalous behavior and…

anchore/syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

dependency-check/dependencycheck

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

stackrox/kube-linter

KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best…

open-policy-agent/opa

Declarative policy engine that enables authorization and policy enforcement across services, Kubernetes, Terraform, Docker, and APIs using the Rego…

p4x1s/ansible-cve-2023-36845

Ansible Playbook for CVE-2023-36845(Juniper Networks Junos OS 远程代码执行漏洞)

jitpass/jit

Find the plaintext secrets on your Mac and move them behind Touch ID, injected just in time without breaking the tools that read them. Free and…

luiscastellanos-dev/cobol-shield

Security hardening toolkit for COBOL legacy systems — invisible Unicode detection, format boundary analysis, source transformation integrity

neelkotnis/azure-security-auditor

CLI tool to audit Azure security posture, RBAC, NSGs, storage, identity, and encryption

google/safetext

Go library for safe YAML and shell generation, using syntax-aware templates to detect and block injection attacks via annotations for trusted data.

shieldfy/api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API