smokedmeat

SmokedMeat CI/CD Red Team Framework Like Metasploit, but for CI/CD pipelines. From the makers of thepoutine Build Pipeline SAST scanner at BoostSecurity Labs. Warning: This tool is for authorized security testing only. SmokedMeat exists because CI/CD pipeline threats are deeply underestimated...

spamassassin

Apache SpamAssassin GitHub Actions for testing The Apache SpamAssassin project uses a subversion repo for its development process. A read-only mirror of the repo is maintained on GitHub here. The .github directory containing this README file is not part of the Apache SpamAssassin release package...

BurpSuite-collections

Burp-Suite-collections Colección de proyectos relacionados con BurpSuite, principalmente plugins que no están en BApp Store tienda ¡Toda la localización o uso de BurpSuite se realiza bajo la premisa de que tienes configurado el entorno Java correctamente! Tutorial relacionado La última versión...

PcapPlusPlus

...

RAUDI

🐳 RAUDI: Imágenes Docker Actualizadas Regular y Automáticamente RAUDI Regularly and Automatically Updated Docker Images genera y mantiene actualizadas automáticamente una serie de imágenes Docker mediante GitHub Actions para herramientas que no son proporcionadas por los desarrolladores. Tabla de...

PoC-AutoSync

🧠 PoC-AutoSync-Github Automatically collects public Proof-of-Concept PoC exploits from poc-in-github.motikan2010.net and keeps the database up to date with automatic updates. Use responsibly — for research and defensive purposes only. Inspired by nomi-sec/PoC-in-GitHub. 🔍 Overview This repository...

zizmor

🌈 zizmor zizmor is a static analysis tool for CI/CD systems. It can find and fix security issues in common CI/CD setups, including GitHub Actions, Dependabot, and pre-commit. Some of the things zizmor finds:...

exploitarium

https://discord.gg/WytKH65ZR join up for research, help, documentation, and more useful information for those interested. Statement This repo was incomplete when published. In regard to AI usage, my fuzzing workflow was automated by AI with a strict workflow. I used GPT-5.3 for ALL the fuzzing, a...

teampcp-supply-chain-attack

TeamPCP Supply Chain Attack: Technical Analysis & Detection Guide CVE-2026-33634 CVSS 9.4 — The most impactful CI/CD supply chain attack of 2026 so far. Between March 19–25, 2026, threat actor TeamPCP also tracked as DeadCatx3, PCPcat, ShellForce, CanisterWorm executed a cascading supply chain...

vulnerability-spoiler-alert

Vulnerability Spoiler Alert Know about security patches before the CVE drops. View Live Site | Subscribe via RSS A monitoring hub that watches popular open-source repositories and uses AI to detect when commits are patching security vulnerabilities - often before a CVE is even assigned. Findings...

CVE-2025-24071_POC

Video Tutorial Windows Library File Creator CVE-2025-24071/CVE-2025-24054 Demo A minimalistic Rust application that demonstrates the creation of Windows Library files .library-ms with configurable network paths. Overview This project creates Windows Library Description .library-ms files that poin...

tun2socks

Features Universal Proxying : Transparently routes all network traffic from any application through a proxy. Multi-Protocol : Supports HTTP/SOCKS/Shadowsocks/SSH/Relay proxies with optional authentication...

Argus

Argus Este repositorio contiene el código de nuestro artículo de USENIX Security '23 "ARGUS: A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions". Argus es una herramienta integral de análisis de seguridad diseñada específicamente para GitHub Actions. Construido con el...

action-octoscan

📦 :octocat: action octoscan A GitHub Action that performs a security scan of your GitHub actions. This action is based on octoscan 🤸 Usage Customizing inputs outputs Permissions 🤸 Usage Here is a basic example of how to use this action. This will work for both push and pullrequest events...

trivysupplychainanalysis

Quantitative Analysis of Multi-Stage CI/CD Supply-Chain Attacks A formally verified, quantitative reconstruction of the March-2026 Trivy / "TeamPCP" GitHub Actions supply-chain compromise CVE-2026-33634 — modeled in TLA+, checked exhaustively with TLC, and quantified with the PRISM probabilistic...

fix-CVE-2020-15228

Fix CVE-2020-15228 set-env, add-path in Github-Actions This script changes lines in your github action file. You give it a directory name, and it searches for all files with the ".sh" or ".yml" extension. It recognizes these lines: root@kitploit: echo ::set-env name=FOOBAR::$FOOBAR echo ::set-env...

mitmproxy

mitmproxy !autofix.ci:...

gha-lab-8e9316151c

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of gradio-app/gradio at commit...

octoscan

:octocat: octoscan Octoscan — это статический сканер уязвимостей для рабочих процессов GitHub Actions. Оглавление Оглавление Установка Использование загрузка удалённых рабочих процессов анализ GitHub Action Правила dangerous-checkout dangerous-action dangerous-write expression-injection...

Checkmarx-CVE-2025-30066-Detection-Tool

Checkmarx-CVE-2025-30066-Detection-Tool These are tools for scanning your GitHub workflows and logs for potential malicious actions associated with CVE-2025-30066. It checks for a set of known risky GitHub Actions and a suspicious code snippet embedded in workflow files. As well for secrets that...