xiaoqimikko/netty-resolver-dns-checkOffline static checker that inspects packaged Java jars for vulnerable netty-resolver-dns versions and detects whether Spring WebClient actually uses…
anchore/syftCLI tool and library for generating a Software Bill of Materials from container images and filesystems
sigstore/cosignCode signing and transparency for containers and binaries
hotcakex/harden-windows-securityHarden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build…
gadievron/raptorAutonomous security research framework integrating static analysis, binary analysis, fuzzing, LLM-powered vulnerability validation, exploit…
sheeki03/tirithTerminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and…
backbay-labs/clawdstrikePolicy engine and EDR for AI agent fleets and developer workstations. Monitors tool calls, file access, network flows, and process execution with…
microsoft/secureboot_objectsMicrosoft's curated repository of secure boot objects (KeK, Db, Dbx) for firmware and runtime, enabling transparent revocation updates and…
arsbr/veritensorThe Anti-Virus for AI Artifacts & RAG Firewall. A static analysis tool scanning Models and Notebooks for RCE, Datasets and RAG docs for Data…
asteroid-belt/skultoOffline and security-first tool for syncing and managing agent skills
platanor/hardware-compliance-handbookAI-ready knowledge base of security & compliance regulations for hardware and connected-device manufacturers - structured, indexed, and…
aquasecurity/trivy-plugin-aquaPlugin for integrating Trivy with Aqua Security platform to scan IaC, pipelines, and dependencies for vulnerabilities and misconfigurations.
bio/vue-template-compiler-patchedPatched Vue 2.7.16 template compiler with fixes for CVE‑2024‑6783 and CVE-2024-9506
xiaoqimikko/spring-cvss-checkScans Java artifacts and source for Spring/Tomcat CVEs, compares vendor vs NVD CVSS scores, verifies exploitability conditions, and checks if fix…
tin-z/solidity_cve-2021-42574-pocPOC of CVE-2021-42574 for solidity and solc compiler
s1ko/cve-2026-52617Advisory and proof-of-concept for OS command injection in an MCP ffmpeg helper, with root-cause analysis, detector guidance, and mitigations for an…
appsec-forge/appsec-forgeStructured security knowledge base with production-inspired cases: vulnerability analysis, exploit explanation, remediation, and DevSecOps for…
wattocyber/masqLive recon and posture auditing for AI agent infrastructure: scans MCP configs, session logs, and APIs for secrets, poisoned catalogs, and CoT leaks.
