Tools

elementalsouls/claude-bughunter

A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24…

owasp/cve-lite-cli

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix,…

tencent/ai-infra-guard

A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.

oscerd/cve-2026-85243

Runnable Spring Boot and Quarkus proof-of-concept for CVE-2026-85243, demonstrating the Apache Camel camel-crypto-pgp integrity-verification…

oscerd/cve-2026-80344

Runnable proof-of-concept reproducer for CVE-2026-80344 in Apache Camel camel-as2, demonstrating asynchronous MDN SSRF and credential disclosure with…

suruurism/cve-writeups-and-pocs

CVE-2026-80724 PoC + full write-up — Linux kernel ptp/vmclock read-only mapping becomes writable (VM_MAYWRITE). Discovered, reported & fixed by…

lirantal/awesome-nodejs-security

Curated directory of Node.js security tools, static analyzers, vulnerability scanners, and educational resources covering OWASP Top 10, supply chain…

industri4l-h3ll-xpl0it3rs/cve-2026-33017-langflow-rce

CVE-2026-33017 Exploit | by infrar3d

nvidia/garak

Modular LLM vulnerability scanner that probes for hallucination, data leakage, prompt injection, jailbreaks, and toxicity using static, dynamic, and…

7ragnarok7/cve-2024-37888

XSS PoC/Exploit for Open Link Plugin for CKEditor 4

fankh/vulnerability-poc

CVE proof-of-concept labs, exploit scripts, and detection/prevention rules (Nginx, Apache, Snort, YARA) for high-severity CVEs. Authorized security…

oscerd/cve-2026-79986

Reproducer and analysis for CVE-2026-79986, a path traversal in Apache Camel camel-azure-files where share listing names escape the polled directory.

oscerd/cve-2026-79985

Reproducer and analysis for CVE-2026-79985, a path traversal in Apache Camel camel-smb where share-listing names bypass directory containment, with…

doretox/atomicvulns

Atomic web vulnerability labs. One OWASP flaw per app — minimal Flask + Docker, intentionally broken for hands-on study with Burp Suite.

nicetop1027/cve-2026-pending-django-summernote-rce

Proof-of-concept for arbitrary file upload RCE in django-summernote when Pillow is missing. Exploits CWE-434 to upload a web shell.

nicetop1027/cve-2026-pending-flask-uploads-path-traversal-poc

Demonstration of CWE-22 Path Traversal in Flask-Uploads 0.2.1. For educational and security research purposes only. Tested on Python 3.11.

xibhi/cve-2025-26206

CSRF vulnerability in Selldone Storefront v1.0 leading to privilege escalation (CVE-2025-26206, CVSS 9.0).

trailofbits/skills

Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows