Tools

owasp/owasp-ctf-in-a-box

Self-hosted OWASP CTF kit: one box, one free GitHub org, no cloud dependencies

owasp/owasp-ctf

Self-hosted CTF control plane for security-learning events: team registration, live leaderboard, and patch-to-score, quiz, jeopardy, and AI challenge…

pmotadeee/pmotadeee

Bora Jogar?

actions-security-demo/compromised-packages

StepSecurity owned org for analyzing compromised packages

boringtools/git-alerts

Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files

ytisf/pyexfil

PyExfil — Python 3 toolkit for researching and stress-testing data exfiltration techniques across network, physical, and steganographic channels. For…

ekzhang/bore

Simple TCP tunnel in Rust that exposes local ports to a remote server, bypassing NAT firewalls. Lightweight, self-hostable, and easy to install.

cameloo1/sharepoint-toolshell-micro-postmortem

Reproducible incident micro-postmortem for on-prem Microsoft SharePoint “ToolShell” (CVE-2025-53770): ATT&CK snapshot, “logs that matter” table,…

sunrayvision/vision-msi-thermal-control

MSI Modern 15H AI C1MGT-096IT Linux thermal management - Reverse engineered EC control with fan profiles and battery threshold

l4zyfox/rise-ultimate_project_manager_e_crm

CVE-2025-3855 - RISE Ultimate Project Manager - IDOR

soteria-security/365inspect

A PowerShell script that automates the security assessment of Microsoft 365 environments.

hahwul/gitls

🖇 Enumerate git repository URL from list of URL / User / Org. Friendly to pipeline

ospg/binwalk

Firmware Analysis Tool

echo-devim/fhex

A Full-Featured HexEditor compatible with Linux/Windows/MacOS

bor8/cve-2022-34169

https://nvd.nist.gov/vuln/detail/CVE-2022-34169

molly/gh-dork

Automated GitHub dorking tool that searches user, organization, and repository code for exposed secrets, credentials, and security misconfigurations…

s0md3v/zen

CLI tool to find email addresses of GitHub users, contributors, and organization members, with multi-threading, JSON output, and breach checking via…