853 matches found
Custom-Nuclei-Templates
Custom Nuclei Templates This collection of Nuclei templates is designed to enhance your security testing capabilities. Made a few custom templates and i might add more as time goes on. Introduction Nuclei is a powerful tool for fast and customizable vulnerability scanning. This repository contain...
aegis-lens
Aegis Lens 🔍🛡️ A browser extension Manifest V3 that turns t...
django-DefectDojo v3.3.100
DefectDojo | ---|--- DefectDojo is a DevSecOps, ASPM application security posture management, and vulnerability management tool. DefectDojo orchestrates end-to-end security testing, vulnerability tracking, deduplication, remediation, and reporting. Demo Pro Edition: pro.demo.defectdojo.com OWASP...
sippts v4.2.1
What is Sippts? Sippts is a set of tools to audit VoIP servers and devices using the SIP protocol. Sippts is programmed in Python and it allows us to check the security of a VoIP server using the SIP protocol. Is it free? Yes. You can freely use, modify and distribute it. If you modify it, please...
Investigating Developer-Reported Software Security Testing Challenges
Software security testing SST is essential for identifying vulnerabilities and improving software security, but developers often face practical challenges when selecting tools, configuring test environments, interpreting scanner outputs, testing authentication workflows, and acting on reported...
zaproxy w2026-09-03
The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...
Project-01-Cybersecurity-Home-Lab
Project 1 — Cybersecurity Home Lab Project Overview This...
Dark-Moon v1.3.1
The Open-Source AI-Powered Autonomous Penetration Testing Platform The only autonomous AI pentester where the model never sees your real IPs, hostnames or credentials. As featured in Help Net Security · Cyber Security News · SecurityBrief · LinuxLinks · IT Brief · ChannelLife Full Documentation ·...
vulnerability-harness
Vulnerability Harness An LLM harness that reads code, for...
zaproxy w2026-08-19
The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...
clusterfuzz v2.37.1
ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...
Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection
Cybersecurity researchers at Wiz have disclosed a new GitHub Actions workflow injection vulnerability in Snowflake's public snowflakedb/snowflake-connector-net repository that it said could be exploited through a crafted GitHub issue to execute commands in a workflow containing internal Jira...
Workspace Topology As an Attack Vector in Agentic Coding Assistants
Agentic coding assistants are finding widespread use, not just in new code development but in quickly ingesting and leveraging third-party code. This opens up a risk of malicious code being ingested as these coding tools operate with broad filesystem access inside developer workspaces. In this...
Exploit for Missing Authentication for Critical Function in Coreweave Marimo
CVE-2026-39987-Poc Proof o...
Security Tests As Executable Specifications for LLM Code Generation: Benefits, Trade-Offs, and Coverage Limits
Large language models LLMs can generate functionally useful code that remains vulnerable, while security-focused interventions may break intended behavior. We investigate security tests as executable specifications both before generation and during iterative repair. We develop SecTDD, a controlle...
Generating Attacks for LLMs with GFlowNets
The rapid advancement of Large Language Models LLMs has facilitated their ubiquitous integration into various domains, leading to widespread adoption. However, this escalating trend has introduced significant security vulnerabilities, necessitating the identification and mitigation of flaws arisi...
AutoSRC-AISkill
AutoSRC-AISkill A fully automated SRC vulnerability discover...
Exploit for CVE-2026-64638
CVE-2026-64638 – XSS2Shell: WordPress login page pre-authentic...