nushell

Nushell A new type of shell. Table of Contents Status Learning About Nu Installation Configuration Philosophy Pipelines Opening files Plugins Goals Officially Supported By Contributing License Status This project has reached a minimum-viable-product level of quality. Many people use it as their...

ci-supplychain-guard

CI Supply Chain Guard A static analysis tool for detecting malicious dependencies in CI/CD pipelines before they're merged into your codebase. Author: Otsmane Ahmed Status: Research Prototype v1.0 Quick Start root@kitploit: 1. Clone and install git clone...

CVE-2026-54745

A flaw was found in Kubeflow Pipelines. An unauthenticated attacker can exploit a Server-Side Request Forgery SSRF and HTTP smuggling vulnerability through the /proxy/ route. This allows the attacker to bypass authorization and forward arbitrary requests to internal services. Consequently, this c...

DeepZero

Automated vulnerability research pipeline engine Define pipelines as YAML. DeepZero handles orchestration, parallelism, fault tolerance, and state. English | 简体中文 | Français 🔗 Pipeline-as-YAML - chain ingest, filter, transform, and LLM-assess stages declaratively ⚡ Parallel execution -...

melange

melange Build apk packages using declarative pipelines. Commonly used to provide custom packages for container images built with apko. The majority of apks are built for use with either the Wolfi or Alpine Linux ecosystems. Key features: Pipeline-oriented builds. Every step of the build pipeline ...

reconswarm

ReconSwarm ReconSwarm is a modular reconnaissance automation framework designed for distributed security testing. It provisions cloud infrastructure, executes parallel reconnaissance pipelines, and collects results with minimal configuration overhead. ReconSwarm is suitable for bug bounty hunters...

ecs-mapping

Corelight ECS Ingest Pipeline The repository is compromised of Ingest Pipeline files required to be used with the installer script in the repository https://github.com/corelight/ecs-templates The installer in that repository will download the files from this repository therefore using this...

nord-stream

Nord Stream Nord Stream es una herramienta que permite extraer secretos almacenados en entornos CI/CD mediante el despliegue de pipelines maliciosos. Actualmente es compatible con Azure DevOps, GitHub y GitLab. Puedes encontrar más información en el siguiente artículo de blog:...

ai-llm-red-team-handbook

AI / LLM Red Team Field Manual & Consultant's Handbook A comprehensive operational toolkit for conducting AI/LLM red team assessments on Large Language Models, AI agents, RAG pipelines, and AI-enabled applications. This repository provides both tactical field guidance and strategic consulting...

ecs-logstash-mappings

Pipeline de Logstash para Corelight ECS El repositorio se compone de archivos de pipeline de Logstash necesarios para usarse con el script de instalación del repositorio https://github.com/corelight/ecs-templates El instalador de ese repositorio descargará los archivos de este repositorio, por lo...

Tylium

Tylium Primary data pipelines for intrusion detection, security analytics and threat hunting These files contain configuration for producing EDR endpoint detection and response data in addition to standard system logs. These configurations enable the production of these data streams using F/OSS...

anticipator

Anticipator Runtime security for multi-agent AI systems. Anticipator detects prompt injection, credential leakage, encoding attacks, homoglyph spoofing, path traversal, and anomalous agent behavior across LangGraph pipelines — before they become incidents. No LLMs. No embeddings. No external APIs...

pwnproxy

pwnproxy One security testing engine. Every interface. An open, local-first security testing platform for pentesters, AI agents, CI/CD pipelines, and teams. Security testing is no longer a desktop-only workflow Traditional security tools were designed around a single tester using a desktop...

Snyk Scan

Bitbucket Pipelines Pipe: Snyk This pipe uses Snyk to find, fix and monitor known vulnerabilities in your app dependencies and docker image. YAML Definition Add the following snippet to the script section of your bitbucket-pipelines.yml file: root@kitploit: - pipe: snyk/snyk-scan:1.0.2 variables:...

sonarcloud-scan

Bitbucket Pipelines Pipe: SonarQube Cloud scan Scan your code with SonarQube Cloud to detects bugs, vulnerabilities and code smells in more than 25 programming languages. Your SonarCloud account must first be associated to your Bitbucket team or user account. SonarQube Cloud is totally free for...

DEFCON-CICD-pipelines-workshop

CI/CD : The new Eldorado ? Abstract CI/CD pipelines are increasingly becoming part of the standard infrastructure within dev teams, with the rise of new approaches such as Infrastructure as Code, the sensitivity level of such pipelines is escalating quickly. In case of compromise, it is not just...

gitoops

GitOops! 😱 all paths lead to clouds GitOops is a tool to help attackers and defenders identify lateral movement and privilege escalation paths in GitHub organizations by abusing CI/CD pipelines and GitHub access controls. It works by mapping relationships between a GitHub organization and its CI/...

scanner-cli

弃用通知：Hawkeye 已到达生命周期终点。 目前已有更多现代化方案可供您和您的项目使用。如果您希望接手该项目的维护工作，请随时与我联系。您可以在我的个人主页上找到我的联系方式。 . . . . . . Hawkeye scanner-cli 是一个项目安全、漏洞及通用风险突出工具。它旨在集成到您的预提交钩子和流水线中。 运行和配置扫描器 Hawkeye scanner-cli 假定您的目录结构将工具链的文件放在顶层。大致而言，它遵循以下原则： Node.js 项目在顶层有 package.json Ruby 项目在顶层有 Gemfile Python 项目在顶层有...

scanner-cli

Deprecation Notice: Hawkeye has reached its end of life. There are more modern options out there for you and your project. If you wish to pick up maintenance of the project, please feel free to contact me. You'll find means of reaching out to me on my personal homepage. . . . . . . The Hawkeye...

openclarity

OpenClarity is an open source tool for agentless detection and management of Virtual Machine Software Bill Of Materials SBOM and security threats such as vulnerabilities, exploits, malware, rootkits, misconfigurations and leaked secrets. Join OpenClarity's Slack channel to hear about the latest...