compromised-packages
actions-security-demo/compromised-packagesStepSecurity owned org for analyzing compromised packages
code-analysismalware-analysissecret-detection+3
1
actions-security-demo/compromised-packagesStepSecurity owned org for analyzing compromised packages
jas502n/cve-2018-14665Local privilege escalation exploit for CVE-2018-14665 targeting X.Org Server on OpenBSD and Linux. Provides a proof-of-concept script to gain root…
boringtools/git-alertsTool to detect and monitor GitHub org users' public repositories for secrets and sensitive files
cameloo1/sharepoint-toolshell-micro-postmortemReproducible incident micro-postmortem for on-prem Microsoft SharePoint “ToolShell” (CVE-2025-53770): ATT&CK snapshot, “logs that matter” table,…
sunrayvision/vision-msi-thermal-controlMSI Modern 15H AI C1MGT-096IT Linux thermal management - Reverse engineered EC control with fan profiles and battery threshold
bolonobolo/cve-2018-14665Proof-of-concept exploit for CVE-2018-14665, a local privilege escalation in Xorg on Linux distributions, with analysis and PoC for Red Hat.
owasp/owasp-ctf-in-a-boxSelf-hosted OWASP CTF kit: one box, one free GitHub org, no cloud dependencies
owasp/owasp-ctfSelf-hosted CTF control plane for security-learning events: team registration, live leaderboard, and patch-to-score, quiz, jeopardy, and AI challenge…
ytisf/pyexfilPyExfil — Python 3 toolkit for researching and stress-testing data exfiltration techniques across network, physical, and steganographic channels. For…
molly/gh-dorkAutomated GitHub dorking tool that searches user, organization, and repository code for exposed secrets, credentials, and security misconfigurations…
ekzhang/boreSimple TCP tunnel in Rust that exposes local ports to a remote server, bypassing NAT firewalls. Lightweight, self-hostable, and easy to install.
hahwul/gitls🖇 Enumerate git repository URL from list of URL / User / Org. Friendly to pipeline
rizinorg/rizinUNIX-like reverse engineering framework and command-line toolset.
soteria-security/365inspectA PowerShell script that automates the security assessment of Microsoft 365 environments.
s0md3v/zenCLI tool to find email addresses of GitHub users, contributors, and organization members, with multi-threading, JSON output, and breach checking via…
echo-devim/fhexA Full-Featured HexEditor compatible with Linux/Windows/MacOS
mthbernardes/leakmanagerA tool to help you manage your leaks
l4zyfox/rise-ultimate_project_manager_e_crmCVE-2025-3855 - RISE Ultimate Project Manager - IDOR