gitleaks

Gitleaks ┌─○───┐ │ │╲ │ │ │ ○ │ │ ○ ░ │ └─░───┘ !WARNING Gitleaks is feature complete. I'm not merging new features into Gitleaks. Future releases will be security patches only. I'm shifting my focus to Betterleaks Gitleaks is a tool for detecting secrets like passwords, API keys, and tokens in g...

sandbox-runtime

Anthropic Sandbox Runtime srt A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container. srt uses native OS sandboxing primitives sandbox-exec on macOS, bubblewrap on Linux and proxy-based network filterin...

nanoclaw

An AI assistant that runs agents securely in their own containers. Lightweight, built to be easily understood and completely customized for your needs. nanoclaw.dev • docs • 中文 • 日本語 • 한국어 • • Agents in Slack: one app per agent Setup provisions each agent its own Slack app: manifest, avatar, and...

laurel

Linux Audit – Usable, Robust, Easy Logging LAUREL is an event post-processing plugin for auditd8 that generates useful, enriched JSON-based audit logs suitable for modern security monitoring setups. Documentation corresponding to the latest stable release can be found here. Why? TLDR: Instead of...

moria

moria IoT firmware identification and extraction moria identifies files and the structures embedded inside firmware and IoT images filesystems, kernels, bootloaders, archives, keys and unpacks most of what it finds, without root. It reports each finding with a byte offset, a type, and a confidenc...

zephyr

.. raw:: html The Zephyr Project is a scalable real-time operating system RTOS supporting multiple hardware architectures, optimized for resource constrained devices, and built with security in mind. The Zephyr OS is based on a small-footprint kernel designed for use on resource-constrained...

objection

📱objection - Runtime Mobile Exploration objection is a runtime mobile exploration toolkit, powered by Frida, built to help you assess the security posture of your mobile applications, without needing a jailbreak. Supports both iOS and Android. Inspect and interact with container file systems...

CVE-2024-38475

CVE-2024-38475 exploit CVE-2024-38475modrewrite weakness with filesystem path matching This repository contains a Python script for testing web server vulnerabilities, specifically targeting Apache servers. The script checks for potential issues modrewrite weakness with filesystem path matching t...

nah

expensive mistakes stop here a guard that blocks catastrophic agent actions nahguard.ai • what it blocks • how it compares • how it decides • install • extend • threat model claude code · codex · cursor · pi · + 11 more nah is a guard that sits in your coding agent's hook path and reads tool call...

usbsas

usbsas is a free and open source GPLv3 tool and framework for securely reading untrusted USB mass storage devices. Overview Following the concept of defense in depth and the principle of least privilege, usbsas's goal is to reduce the attack surface of the USB stack. To achieve this, most of the...

fence

Fence wraps commands in a sandbox that blocks network access by default and restricts filesystem operations based on configurable rules. It's most useful for running semi-trusted code package installs, build scripts, CI jobs, unfamiliar repos with controlled side effects, and it can also compleme...

ansible-role-log4shell

Ansible role - log4shell ⭐ Star us on GitHub — it motivates us a lot! Find Log4Shell CVE-2021-44228 on your system This role tries to find JAR and WAR from filesystem and from opened files lsof ⚠️ Your system may runs slowly during the scan due to a find on / and the unarchive process to lookup...

CVE-2024-32002-Reverse-Shell

CVE-2024-32002-Reverse-Shell This script demonstrates how to exploit CVE-2024-32002 to obtain a reverse shell, providing remote access to the affected system. Use it with caution in controlled environments and only for educational or security testing purposes. Blog Post This script is inspired by...

Project-CVE-2026-75604

Next.js Windows Cache Traversal Security Research Defensive security research and authorized validation only. This repository concerns CVE-2026-75604 , a critical vulnerability that may permit unauthenticated remote code execution on certain Windows-hosted Next.js deployments. Credits Coded by:...

openwrt

OpenWrt Project is a Linux operating system targeting embedded devices. Instead of trying to create a single, static firmware, OpenWrt provides a fully writable filesystem with package management. This frees you from the application selection and configuration provided by the vendor and allows yo...

CVE-2024-21626

Usage: 1.git clone https://github.com/cdxiaodong/CVE-2024-21626 2.docker-compose up Verification: If you can obtain the host's /etc/passwd, the vulnerability exists. Environment: runc: =v1.0.0-rc93,=1.1.11 Attack details & principle: In affected versions of runc, during initialization, some...

GHSA-R3H5-4585-7X3W Astro: Image endpoint in @astrojs/node can read files from a case-variant sibling of the output directory on case-sensitive filesystems

Summary The /image endpoint used by the @astrojs/node adapter checks that a requested local image is inside the build output directory before reading it from disk. That check compared paths case-insensitively. On case-sensitive filesystems such as Linux, a directory whose path differs from the...

Astro: Image endpoint in @astrojs/node can read files from a case-variant sibling of the output directory on case-sensitive filesystems

Summary The /image endpoint used by the @astrojs/node adapter checks that a requested local image is inside the build output directory before reading it from disk. That check compared paths case-insensitively. On case-sensitive filesystems such as Linux, a directory whose path differs from the...

EUVD-2026-124748

Astro: Image endpoint in @astrojs/node can read files from a case-variant sibling of the output directory on case-sensitive filesystems...

CVE-2023-42931

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ macOS Privilege...