
gitGRAB
This tool is designed to interact with the GitHub API and retrieve specific user details, repository information, and commit emails for a given user.

This tool is designed to interact with the GitHub API and retrieve specific user details, repository information, and commit emails for a given user.

Fast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs. Support for GitHub dorks.

Finding potential software vulnerabilities from git commit messages

An information gathering tool to collect git commit emails in version control host services

This is a mirror of a forked repository. It adds several features to gitrob including GitLab support, commit content searching, in-memory repository…

🕷️ A `.git` folder exploiting tool that is able to restore the entire Git repository, including stash, common branches and common tags.

Proof-of-concept exploit for CVE-2013-2006 targeting OpenStack Keystone authentication bypass vulnerability. Includes reference to the vulnerable…

PoC: identify silent security patches before CVE

Python script to scan Git repos for interesting strings

Pluggable linting tool to prevent committing credential.

A simple tool to generate fake web browsing and mitigate tracking

Python exploit for CVE-2026-89013, an unauthenticated Dolibarr hashp authorization bypass enabling arbitrary file read, with check, list, hunt, read,…

Proof-of-concept exploit for CVE-2026-54596: authenticated SQL injection in ITFlow's recurring_invoice_frequency parameter enabling full database…

Repository containing V8 JavaScript engine source code with a specific commit for CVE-2021-0396, likely for vulnerability research and exploitation.

Reproduces CVE-2026-39866, a workflow_dispatch input template injection in a GitHub Actions workflow, using a pinned snapshot of the vulnerable…

Open-source secret scanner in Rust

Proof of Concept for CVE-2023-38434

Security patch and proof-of-concept for GoBalance onion load balancer, covering master key recovery via blindedSign and forged descriptor acceptance,…