3503 matches found
minder
| | | | | Installation | Documentation | Releases What is Minder? Minder is an open source platform that helps development teams and open source communities build more secure software, and prove to others that what they’ve built is secure. Minder helps project owners proactively manage their...
mihari
mihari A query aggregator for OSINT based threat hunting. Mihari can aggregate multiple searches across multiple services in a single rule & persist findings in a database. Mihari supports the following services by default. Censys CIRCL passive DNS / passive SSL crt.sh dnstwister Fofa GreyNoise...
sonarqube
SonarQube SonarQube is the algorithmic verification platform for code quality and security. Its static analysis applies techniques such as symbolic execution and data and control flow analysis to inspect your code, find bugs, vulnerabilities, and structural problems, and tell you exactly what to...
screenpipe
DOWNLOAD SCREENPIPE screenpipe | YC S26 Screenpipe finds work worth automating in your company Continuously record your company's computer work, map workflows, help find work worth automating, and power agents' context https://github.com/user-attachments/assets/70fe94eb-6d2a-47ca-b7c3-c8ead13a5b7...
reconness
ReconNess Web App Why ReconNess? Well, we have seen a lot of bugbounty hackers organizing his recon using txt and doing a lot of bash scripts to filter the output to keep everything organized with the intention to focus only on the potentially vulnerable targets. But realistically this demands a...
ARES
Operator-Directed Red Team Orchestration & Continuous Security Validation Platform The open-core platform empowering enterprise red teams, MSSPs, and security operations centers to execute targeted offensive engagements, discover deterministic attack paths, and continuously validate defensive...
cscan
cscan Faraday Continuous Scanning More information: http://blog.infobytesec.com/2015/09/faraday-continuous-scanning.html http://blog.infobytesec.com/2015/09/faraday-continuous-scanning.html...
clusterfuzzlite
ClusterFuzzLite ClusterFuzzLite is a continuous fuzzing solution that runs as part of Continuous Integration CI workflows to find vulnerabilities faster than ever before. With just a few lines of code, GitHub users can integrate ClusterFuzzLite into their workflow and fuzz pull requests to catch...
ftw
Framework for Testing WAFs FTW Purpose This project was created by researchers from ModSecurity and Fastly to help provide rigorous tests for WAF rules. It uses the OWASP Core Ruleset V3 as a baseline to test rules on a WAF. Each rule from the ruleset is loaded into a YAML file that issues HTTP...
sub.Monitor
sub.Monitor Fast & user-friendly subdomain monitoring tool for continous attack surface management. Why? Why opt for sub.Monitor? This program offers easy setup due to its utilization of SQLite for storing all identified domains removing the necessity for prior database management. Moreover, it...
GitMonitor
GitMonitor GitMonitor One way to continuously monitor sensitive information that could be exposed on Github Summary I know that there are many other tools available for finding sensitive information currently leaked on Github, I myself still use some of them. However, I think they still lack some...
nerve
Network Exploitation, Reconnaissance & Vulnerability Engine N.E.R.V.E Table of Contents Continuous Security About NERVE What is NERVE Features Prerequisites Installation Deployment Recommendations Installation - Docker Installation - Bare Metal Installation - Multi Node Upgrade Security Usage...
MassScanning-CVE-2025-55182
VPS Continuous Scanner A lightweight orchestrator and worker scanner setup for running large/continuous scans across split input files. This repository contains orchestration scripts, a Docker-based worker image, and helper scripts to run scans repeatedly and collect results. Repository layout...
bleah
This repository is DEPRECATED, please usebettercap as this tool has been ported to its BLE modules...
GitLab CI Lint API - Server-Side Request Forgery
GitLab 10.5 and later contain a server-side request forgery caused by insecure handling of webhook requests, letting unauthenticated attackers exploit the server for arbitrary requests, exploit requires sending crafted webhook requests. id: CVE-2021-22175 info: name: GitLab CI Lint API -...
FreeMOCA
Continual Learning Trajectory as Memory for Replay-Free Consolidation in Malicious Code Analysis !NOTE This is official implementation of the paper Continual Learning Trajectory as Memory for Replay-Free Consolidation in Malicious Code Analysis. FreeMOCA Pipeline FreeMOCA operates in the followin...
sentrygrid
SentryGrid ML-driven threat detection and continuous monitoring platform built for federal zero-trust architectures. OSCAL-native, FedRAMP Moderate-aligned, hash-chained audit, three-model anomaly ensemble. Quick start make setup install bun + python deps make dev-up bring up the local stack via...
cov-int
XWiki Commons XWiki Commons are technical libraries common to several other top level XWiki projects. These libraries can be used by projects outside of the XWiki ecosystem, are generic and not related to the wiki domain. XWiki Platform, XWiki Commons and XWiki Rendering are part of the XWiki.org...
clusterfuzzlite
ClusterFuzzLite ClusterFuzzLite es una solución continua de fuzzing que se ejecuta como parte de flujos de trabajo de Integración Continua CI para encontrar vulnerabilidades más rápido que nunca. Con solo unas pocas líneas de código, los usuarios de GitHub pueden integrar ClusterFuzzLite en su...