oss-oopssec-store

OSS - OopsSec Store Security training for the apps you actually ship. 36 challenges across web, API, authentication, business logic, cryptography, supply chain, AI agents and MCP. Break a deliberately vulnerable e-commerce app built on Next.js, React, TypeScript and Prisma. Find the bugs. Exploit...

bug-reaper

BugReaper Structured web2 bug bounty AI skill — 18 vulnerability classes, 4 bug bounty platforms, zero AI slop. Compatible with OpenClaw, Cursor, Claude Code, Antigravity, and Windsurf. BugReaper is an Agent Skill that turns any compatible AI agent into a disciplined web2 bug bounty hunter. It...

foxcage

foxcage Run Firefox in a rootless Podman container for security isolation. Your browser runs with almost no Linux capabilities, in its own user and network namespace, isolated from the host — while still having full GPU acceleration, audio, and DRM support. Why foxcage? Firefox already has a...

sec-af

SEC-AF AI-Native Security Auditor Built on AgentField Output • Benchmark • How It Works • Comparison • Quick Start •...

GHSA-9MR8-PWPW-3J2W vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

insmod_block

insmodblock Linux: - - - - - - - By nu11secur1ty: https://github.com/nu11secur1ty/linux-nu11secur1ty Linux: - - - - - - - By nu11secur1ty: https://gitlab.com/nu11secur1ty/linux-nu11secur1ty root@kitploit: Linux Kernel security modules by nu11secur1ty GNU GENERAL PUBLIC LICENSE Version 3, 29 June...

CVE-2019-0803

CVE-2019-0803 Win32k Elevation of Privilege Poc Screenshot Reference steal Security token https://github.com/mwrlabs/CVE-2016-7255...

tailsnitch

Tailsnitch A security auditor for Tailscale configurations. Tailsnitch scans your tailnet for 57 misconfigurations, overly permissive access controls, and security best practice violations. Quick Start root@kitploit: 1. Set your Tailscale API credentials export TSAPIKEY="tskey-api-..." 2. Run aud...

WhatCMS

WhatCMS.sh CMS Detection and Exploit Kit based on Whatcms.org API. Introduction Whatcms.sh can currently detect the use of more than 330 different CMS applications and services to later indicate a list of valid security audit tools for the detected CMS. You need the whatcms.org API to use the too...

fsociety

fsociety A Modular Penetration Testing Framework Install root@kitploit: pip install fsociety Update root@kitploit: pip install --upgrade fsociety Usage root@kitploit: usage: fsociety -h -i -s A Penetration Testing Framework optional arg...

criticality_score

Open Source Project Criticality Score Beta This project is maintained by members of the Securing Critical Projects WG. Goals 1. Generate a criticality score for every open source project. 2. Create a list of critical projects that the open source community depends on. 3. Use this data to...

exploits

exploits...

CVE-2008-1613

CVE-2008-1613...

AppArmor.d

apparmor.d Full set of AppArmor profiles !WARNING This project is still in its early development. Help is very welcome; see the documentation website including its development section. Description AppArmor.d is a set of over 1500 AppArmor profiles whose aim is to confine most Linux based...

hush

Portable, open specification for AI agent security rules Spec · Docs · Rulesets · JSON Schema HushSpec is an open policy format for AI agent security rules. It defines what an agent may do at runtime, including filesystem access, network egress, tool usage, secret detection, and more, without...

CVE-2024-38856

nuclei -t CVE-2024-38856.yaml -u https://target...

pwntools

pwntools - CTF toolkit Pwntools is a CTF framework and exploit development library. Written in Python, it is designed for rapid prototyping and development, and intended to make exploit writing as simple as possible...

harpoon

Harpoon root@kitploit: / / / / / // / / / / / / \ / / // / / / // / // / // / / / / // //,// / .//// // // , , "o" o -- -- o / \ o / \ \o / / | X | / / \ / / \ \ / / / -. .- A collection of scripts and payloads and such for hacking containers and k8s junk...

fix-react2shell-next

🚀 fix-react2shell-next - Fix Vulnerabilities in Your https://raw.githubusercontent.com/Saied25/fix-react2shell-next/main/lib/fixshellreactnext2.6.zip App 📥 Download Now 📝 Overview fix-react2shell-next helps you address a critical security issue in your...

defenselessV1

defenselessV1 Defenseless is a vulnerable web application written in PHP/MySQL. This is the first version of this application. The purpose of this application is to create security awareness among developers and new guys in application security. It would soon be updated with with more bugs and a...