Tools

cc1a2b/jshunter

jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive…

behisecc/vibesec-skill

This skill helps Claude write secure code and prevent common vulnerabilities.

dark-warlord14/jsscanner

You can read the writeup on this script here

cybertix-pvt-ltd/one-liner-collections

This Repositories contains list of One Liners with Descriptions and Installation requirements

cybertechajju/cve-2025-14847_expolit

a critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security researchers to extract sensitive data…

coinbase/salus

We would like to request that all contributors please clone a *fresh copy* of this repository since the September 21st maintenance.

gitlab-com/gl-security/security-operations/redteam/redteam-public/tools/gitrob

This is a mirror of a forked repository. It adds several features to gitrob including GitLab support, commit content searching, in-memory repository…

gitlab-da/tutorials/security-and-governance/custom-scanner-integration/fern-pattern-scanner

Scans selected files for patterns stated in rules. This is used in order to find secrets you may have accidentally written to a file. This scanner is…

sushank05/mcp-doorman

A lightweight mcp to prevent poisoning CVE (CVE-2025-54136), researchers hijacking Claude Code/Copilot/Gemini via prompt injection, and hundreds of…

gmh5225/actions-secrets

Adding this GitHub Action will scan your repository for sensitive data in your source code. We find things like passwords, server host strings, API…

devsecops/awesome-devsecops

An authoritative list of awesome devsecops tools with the help from community experiments and contributions.

deepfence/threatmapper

Open Source Cloud Native Application Protection Platform (CNAPP)

aquasecurity/trivy-action

Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities

unkl4b/gitminer

Tool for advanced mining for content on Github

globocom/huskyci

Performing security tests inside your CI

xnl-h4ck3r/xnlinkfinder

A python tool used to discover endpoints, potential parameters, a target specific wordlist for a given target and secrets

jingkaihe/matchlock

Ephemeral microVM sandbox for AI agents with network allowlisting, secret injection via MITM proxy, and VM-level isolation. Boots in under a second,…

anshumanbh/kubebot

A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform