Tools

hashicorp/vault

A tool for secrets management, encryption as a service, and privileged access management

presidentbeef/brakeman

A static analysis security vulnerability scanner for Ruby on Rails applications

godaddy/tartufo

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

navikt/cplt

Sandbox for AI coding agents. Runs Copilot CLI, Claude Code, OpenCode, Gemini CLI, Antigravity, Pi, goose or a plain shell inside a kernel-level…

eqstlab/cve-2026-6951

Proof-of-concept exploit for CVE-2026-6951, a simple-git --config filter bypass enabling RCE via the Git ext protocol, with a Docker lab and reverse…

sayanarijit/cottage

A modern git based age-encrypted secrets manager for teams.

dracondev/dracon-utilities

Invisible infrastructure for Dracon developer workspaces: git sync, system guard, and warden encryption utilities.

secretlint/secretlint

Pluggable linting tool to prevent committing credential.

praetorian-inc/titus

High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.

zephyrproject-rtos/zephyr

Primary Git Repository for the Zephyr Project. Zephyr is a new generation, scalable, optimized, secure RTOS for multiple hardware architectures.

qubesos/qubes-secpack

Curated repository of Qubes OS security bulletins, canaries, PGP keys, and ISO digests, with authenticated verification via git tags and detached…

tralsesec/cve-2023-23946

Original standalone Proof-of-Concept exploit for CVE-2023-23946 (Git path traversal via crafted patches in git-apply).

erberkan/cve-2026-60004-poc

Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.

soemoescode/guardskill

Read-only scanner for what lets a repository run code in a coding agent (Claude Code, Codex, Cursor, Copilot): git settings, hooks, and committed MCP…

shirouuu/gitea-template-sync-path-traversal-privilege-escalation-cve-2026-38526-

PoC and write-up for the HackTheBox "Nexus" privilege escalation: root-run Gitea template-sync service vulnerable to path traversal via forged Git…

batj44/cve-2024-44625-gogs-rce-0.13.0

Exploit for CVE-2024-44625 in Gogs 0.13.0, achieving remote code execution via symlink-follow to create a git hook, with reverse and bind shell modes.

wangyihang/githacker

🕷️ A `.git` folder exploiting tool that is able to restore the entire Git repository, including stash, common branches and common tags.