TATS
icemoonhsv/tatsAnalyze and track OAuth 2.0, OIDC, and Microsoft Entra ID tokens from Burp, mitmproxy, or Chrome DevTools captures. Visualize token lifecycles,…
authenticationidentity-access-managementlog-analysis+2
7
icemoonhsv/tatsAnalyze and track OAuth 2.0, OIDC, and Microsoft Entra ID tokens from Burp, mitmproxy, or Chrome DevTools captures. Visualize token lifecycles,…
atlasvector/certighost-cve-2026-54121Splunk detection writeup for CVE-2026-54121 (CertiGhost): AD CS certificate chase abuse leading to full domain compromise. Lab-validated detection,…
renich/paredLightweight, secure control plane & real-time web dashboard in Crystal for Linux firewalld and NetworkManager host security.
gravitational/teleportThe easiest, and most secure way to access and protect all of your infrastructure.
sleuthco/clawshield-publicSecurity proxy for AI agents. Scans every message for prompt injection, PII, and secrets. Defense-in-depth: Go proxy + iptables firewall + eBPF…
lore-hex/quill-routerTrustedRouter.com repo for secure LLM proxying
canyonroad/agentshExecution-Layer Security (ELS) for AI agents — policy-enforced shell with audit.
owasp-modsecurity/modsecurityModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based…
owasp/python-honeypotOWASP Honeypot, Automated Deception Framework.
shoucheng3/apache__nifi_cve-2022-33140_1-16-22Automated data flow processing and distribution system with secure configuration, provenance tracking, and extensible plugin architecture for…
shoucheng3/asf__nifi_cve-2023-36542_1-22-0Automated data flow platform for processing and distributing data with built-in provenance tracking, secure configuration, and scalable pipeline…
shoucheng3/ff4j__ff4j_cve-2022-44262_1_8_13_fixedFeature toggle framework for Java enabling runtime feature activation, role-based access, AOP-driven toggling, monitoring, audit trails, and a web…
rocklambros/react2shell_hunterAWS Organization-wide detection toolkit for CVE-2025-55182 & CVE-2025-66478 (React Server Components / Next.js RCE vulnerabilities)
ne0zer01/cve-2024-27198_labDocker-based lab for CVE-2024-27198 TeamCity authentication bypass. Includes exploit reproduction, IoC hunting with Sigma/Suricata rules, and…
shoucheng3/asf__karaf_cve-2022-22932_4-3-5Modulith runtime with hot deployment, dynamic configuration, JAAS-based RBAC, and centralized logging. Supports REST/API, web, and Spring Boot…
the-infra-company/kcatcherCatch what's lurking in your Kafka clusters.
zh54321/sharepointdumperPowerShell SharePoint extraction + auditing tool for red/blue/purple teams. Enumerates all SharePoint sites/drives a user can access via Microsoft…
wardgate/wardgateSecurity gateway for AI agents - credential-isolated API proxying and policy-gated remote execution (conclaves). Reduce the blast radius!