Tools

andreicscs/honeywire

Open-source deception platform that turns any Linux machine into a high-signal canary. Deploy tripwire sensors on files, ports, and network services…

swelljoe/flar

Lightweight CLI tool that runs AI coding agents inside isolated Bubblewrap sandboxes with strict filesystem, network, and credential isolation to…

gen0sec/jailer

Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage…

knqyf263/cve-2020-10749

Proof-of-concept exploit for CVE-2020-10749 demonstrating Kubernetes MitM attacks via IPv6 rogue router advertisements between pods.

tabbysable/poc-2020-8558

Information about Kubernetes CVE-2020-8558, including proof of concept exploit.

projectdiscovery/pd-agent

ProjectDiscovery Cloud - Agent

cozystack/copy-fail-blocker

BPF-LSM mitigation for CVE-2026-31431 (Copy Fail) — denies AF_ALG socket creation cluster-wide

alectrocute/honeyprompt

LLM-first deception framework: "The honeypot that talks back!™"

kubearmor/log4j-cve-2021-44228

Apache Log4j Zero Day Vulnerability aka Log4Shell aka CVE-2021-44228

thodoristsampouris/agentguard

Zero-trust sandbox for AI agents with kernel-level filesystem jail, transparent network proxy, and YAML-based policy engine to intercept and control…

secdev02/cyber-decoy

Experimental Decoy Broker

rhysemmas/martian-packets

Crafting raw TCP/IP packets to send to poorly configured Kubernetes servers - CVE-2020-8558 PoC

certushack/cve-2024-3400-poc

Sets up a Docker-based Palo Alto firewall test environment and provides an exploit script to test CVE-2024-3400, enabling safe vulnerability…

twistlock/k8s-cve-2020-8554-mitigations

Prisma Cloud Compute Admission rules to mitigate Kubernetes CVE-2020-8554

spanwich/sel4-ics-gateway-demo

Defensive security demo: seL4 microkernel gateway protecting vulnerable ICS from CVE-2019-14462

cve-2018/cve-2018-10933

Docker-based exploit for CVE-2018-10933, a libssh authentication bypass vulnerability, targeting SSH services on port 2222 for penetration testing.

damnkrishna/cve-2025-32433-lab

A Flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without…

amulyakaushik/cve-2023-27163-lab

Docker-based lab reproducing CVE-2023-27163 SSRF in Request-Baskets, with exploitation verification, detection script, and network-isolation…