pwnvader/cve-2026-87902-poc-pwnvaderShell PoC for CVE-2026-87902, an unauthenticated WordPress core LFI via page-template resolution that chains to RCE through pearcmd.php.
asteroid-belt/skultoOffline and security-first tool for syncing and managing agent skills
containers/bubblewrapLow-level unprivileged sandboxing tool used by Flatpak and similar projects
anthropic-experimental/sandbox-runtimeA lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.
nccgroup/scoutsuiteMulti-cloud security auditing tool that leverages cloud provider APIs to gather configuration data, assess security posture, and generate HTML…
davidcarliez/trustmebroBypass llm guardrails by confusing it with fabricated tool output.
zeroecco/holosDeclarative KVM/QEMU VM orchestration tool using YAML compose files. Manages multi-VM stacks with cloud-init, SSH, PCI passthrough, and image…
facebook/mcpguard-dynamicKernel-level eBPF sandbox for securing LLM agent tool calls made through the Model Context Protocol (MCP)
mathaix/openclawmachinesManage OpenClaw in your team (Enterprise) by providing it compute infrastructure, tool integration, Authentication and security primitives
nccgroup/windowsjoblockWindows Process Lockdown Tool using Job Objects
withsecurelabs/amsidetectionProof-of-concept tool for detecting AMSI (Antimalware Scan Interface) bypasses and malicious in-memory script activity on Windows endpoints.
huzjie/aegisagentRuntime security gateway for AI agents: cryptographically attests tool calls, enforces policies, sandboxes execution, and logs tamper-evident audit…
roxanne_ardary/securekitSecurekit is a protocol-agnostic security kernel that enforces zero-trust, sandboxed execution for AI tool use. It sits between any LLM or agent…
phalanx-ccs/copy-failPassive diagnostic tool that checks if a Linux system is vulnerable to CVE-2026-31431 by testing AF_ALG socket reachability, providing mitigation…
cisagov/esxiargs-recoverA tool to recover from ESXiArgs ransomware
monad-developers/ultrafuzzEnd-to-end agentic smart contract fuzzing and threat hunting
synacktiv/mofosVirtual machines manipulation framework
cert-ee/cuckoo3Open-source automated malware analysis sandbox that runs suspicious files and URLs in isolated VMs and generates detailed behavioral reports.
