Tools

youkyi/pki-toolbox

Client-side PKI toolbox that decodes X.509, CSR, chain, CRL, PKCS#7 and PKCS#12 artifacts, views ASN.1, converts formats, and generates self-signed…

owasp/xpsd

Reachability triage for vulnerability scans. Feeds scanner findings to an LLM agent that reads your source and decides which CVEs are actually…

zhengxr930/apex_official

Defender framework for LLM agent security that compiles task contracts, validates capability manifests, and checks effects via PLANT/WRAP proof…

abraxas/sqlite-fj-using-auth

SQLite 3.53.4 - High - Local - Privilege leftover - FULL JOIN USING skips sqlite3AuthRead

dodo-sec/kpot-string-decrypter

IDA python scripts to decrypt strings from KPOT and set those as comments

praetorian-inc/capability-sdk

Shared Go SDK defining a standard capability interface for security scanners, with multi-format finding output (terminal, JSON, NDJSON, Markdown,…

edtrackai/nextjs-supabase-stripe-security-checker

Local static security scanner for Next.js, Supabase and Stripe apps: 24 AST-based checks for leaked keys, missing RLS and grants, unsafe webhooks.…

bekwiner/cve-2026-47777

Detailed technical analysis of CVE-2026-47777, a high-severity authorization bypass in Mastodon's Featured Collections federation pipeline, including…

sassoftware/jackson

This repository provides a comprehensive security remediation of denial-of-service and allocation of resources without limits or throttling security…

vm2mv/tinyxml

TinyXML 2.6.2 with fixes for CVE-2021-42260 and CVE-2023-34194

shoucheng3/esapi__esapi-java-legacy_cve-2022-23457_2-2-3-1

Enterprise Security API library providing security controls for Java web applications, including authentication, access control, input validation,…

shoucheng3/esapi__esapi-java-legacy_cve-2022-24891_2-2-3-1

OWASP Enterprise Security API library providing security controls for Java web applications, including authentication, access control, input…

shoucheng3/whitesource__curekit_cve-2022-23082_1-1-3

Java security library providing contextual encoders and sanitizers to automatically remediate vulnerabilities like XSS, path traversal, and command…

shoucheng3/owasp__json-sanitizer_cve-2020-13973_1-2-0

Java library that converts malformed JSON-like content into standards-compliant, safe JSON, preventing code injection and ensuring embeddability in…

nanopathi/external_expat_aosp10_r33_cve-2022-22822tocve-2022-22827

Patched version of the Expat XML parser library addressing multiple CVEs (CVE-2022-22822 through CVE-2022-22827) for AOSP 10 r33, providing…

trinadh465/openssl-1_0_1g_cve-2016-0702

OpenSSL 1.0.1g source code snapshot, providing SSL/TLS and general-purpose cryptography library with ciphers, digests, and X.509 certificate handling.

satheesh575555/external_expat_aosp10_r33_cve-2022-23990

C library for parsing XML, specifically patched for CVE-2022-23990, providing a reference implementation for vulnerability analysis and secure coding…