owasp/owasp-subtractive-hardening-top-10The OWASP Subtractive Security Top 10 Project is an initiative to identify, document, and promote the highest-impact opportunities for reducing cyber…
scipag/hardeningkittyHardeningKitty - Checks and hardens your Windows configuration
mtaha-sec/bash-apocalypseRecreating Shellshock (CVE-2014-6271) - the bash vulnerability that endangered millions of servers. Automated exploitation toolkit + Burp Suite…
oscerd/cve-2026-40022Reproducer for CVE-2026-40022: Apache Camel camel-platform-http-main authentication bypass on non-root context paths
admin2099/penetration-testing-assessment-23-04-2026Penetration testing assessment of a vulnerable IIS 6.0 WebDAV server, demonstrating reconnaissance, enumeration, exploitation (CVE-2017-7269), and…
jfs-jfs/cve-2026-37073Incorrect access control in /vfm-admin/ajax/sendfiles.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to send emails from…
jfs-jfs/cve-2026-37072Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php
jfs-jfs/cve-2026-37071Arbitrary File Rename Leading to Privilege Escalation in Actions::renameFile() function in Veno File Manager Project 4.4.9 allows an authenticated…
jfs-jfs/cve-2026-37069Absolute Path Disclosure in /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php in Veno File Manager Project 4.4.9 allows an…
jfs-jfs/cve-2026-37067Incorrect access control in /vfm-admin/admin-panel/view/save-cvs.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to extract…
dshapi/ai-spmThis opensource project dedicated to implementing Enterprise level AI-SPM. By doing so organizations can proactively protect their AI systems from…
farenhytee/database-sentinelClaude Skill that audits your projects for RLS misconfigurations, exposed keys, auth bypasses, and storage vulnerabilities. 27 anti-patterns sourced…
thewaterbug/alpr-dashboard-patchesRuntime patches for algertc/alpr-dashboard: async logger fix and CVE-2025-29927 nginx mitigation
gitlab-security-oss/cis/gitlabcisAudits GitLab projects against the CIS GitLab Benchmark via read-only API checks, generating JSON reports on compliance and hardening recommendations.
0xdsm/juumla🦁 Python project to identify and scan for vulnerabilities related to the Joomla CMS project. It scans for common misconfigurations and public…
teycir/diffcatcherA Rust CLI tool that recursively discovers Git repositories, captures state changes, generates diffs, extracts code elements with full snippets, and…
vaibhavkrishna12004/ubuntu-privesc-labFull penetration testing workflow: credential brute force, SSH access and privilege escalation (CVE-2021-4034)
tsiddiquea/cve-reproduction-labCybersecurity lab demonstrating Apache CVE-2021-41773 path traversal vulnerability with vulnerable server simulation, scanner, and security reporting.
