Tools

hashgraph-online/hol-guard

Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at…

renio-wow/cve-2026-51416

Analyzes a specific CVE in WeChat OAuth handler, identifying unbounded HTTP response reads leading to denial of service, with remediation guidance.

cynepmyx/nginx-rift-check

Detects the CVE-2026-42945 rewrite pattern in nginx configs: rewrite with ? in the replacement plus an unnamed capture consumed in the same location

blackfan/bfscan

Tool for finding URLs, paths, secrets and generating raw HTTP requests and OpenApi specifications from config files and annotations used in JAR / WAR…

cellebrite-labs/ida_kcpp

An IDAPython module for enhancing c++ support on top of ida_kernelcache

owasp/appsec-agent

A TypeScript package that provides AI-powered agents for Application Security (AppSec) tasks, built on top of the frontier models.

owasp/railsgoat

A vulnerable version of Rails that follows the OWASP Top 10

shoucheng3/cov-int

XWiki Commons CVE-2023-31126 v14.10.3 for Coverity analysis

shoucheng3/xwiki__xwiki-commons_cve-2023-29201_14-5

Technical libraries for XWiki projects, providing reusable components for vulnerability analysis, code analysis, and static analysis across…

shoucheng3/xwiki__xwiki-commons_cve-2023-31126_14-10-3

Java library providing technical commons for XWiki projects, with a focus on vulnerability analysis and static code inspection for security testing.

shoucheng3/xwiki__xwiki-commons_cve-2023-36471_14-10-5

Technical Java libraries providing common utilities and components for the XWiki platform, including security vulnerability fixes and code analysis…

sirredbeard/cve-2025-60876

Behavior-preserving fix for CVE-2025-60876 HTTP header injection in BusyBox wget, with proof-of-concept, percent-encoding patch, and upstream…

colton1skees/dna

LLVM based static binary analysis framework

mcp-shark/mcp-shark

Wireshark-like forensic analysis for Model Context Protocol communications Capture, inspect, and investigate all HTTP requests and responses between…

d0rb/cve-2024-4323

Critical heap buffer overflow vulnerability in the handle_trace_request and parse_trace_request functions of the Fluent Bit HTTP server.

hnytgl/cve-2026-42945

这是一个面向防守和内网排查的 CVE-2026-42945 静态检测工具，用于检查 NGINX ngx_http_rewrite_module 相关配置是否存在高风险 rewrite 组合。

friparia/nginx_rift_scan_cve_2026_42945

Nginx Rewrite CVE Scan(CVE-2026-42945 nginx-rift CVE-2026-9256)

byezero/nginx-cve-2026-42945-check

Local read-only scanner for CVE-2026-42945 (NGINX Rift) that checks NGINX, OpenResty, and Tengine instances for vulnerable rewrite configurations…