azure-sentinel-detection-engineering

Azure Sentinel Detection Engineering Detection engineering on a live Microsoft Sentinel and Defender XDR environment I operate. Nine custom analytics rules span three planes, each mapped to MITRE ATT&CK and proven end to end: a controlled action triggers the rule, the rule raises an incident, and...

Dependency Scanning

Component for Dependency and License Scanning This component generates a CycloneDX Software Bill of Materials, which is used by GitLab to identify a project's dependencies, and their licenses. This CycloneDX Software Bill of Materials is compatible with the GitLab taxonomy. Additionally, this...

DevSecOpsGuideline

OWASP DevSecOps Guideline The OWASP DevSecOps Guideline explains how we can implement a secure pipeline and use best practices and introduce tools that we can use in this matter. Also, the project is trying to help us promote the shift-left security culture in our development process. This projec...

tun2socks

Features Universal Proxying : Transparently routes all network traffic from any application through a proxy. Multi-Protocol : Supports HTTP/SOCKS/Shadowsocks/SSH/Relay proxies with optional authentication...

cli

Comenzando con la CLI de Snyk Introducción a la CLI de Snyk Snyk es una herramienta de seguridad nativa de la nube, enfocada en los desarrolladores, para escanear y monitorear tus proyectos de desarrollo de software en busca de vulnerabilidades de seguridad. Snyk escanea múltiples tipos de...

salus

Salus: Guardián de la Seguridad y Protección del Código 🔍 Resumen Salus Security Automation as a Lightweight Universal Scanner, nombrado así en honor a la diosa romana de la protección, es una herramienta para coordinar la ejecución de escáneres de seguridad. Puedes ejecutar Salus en un repositor...

smokedmeat

SmokedMeat Framework de Red Team para CI/CD Como Metasploit, pero para pipelines de CI/CD. De los creadores delpoutine escáner SAST de Build Pipeline en BoostSecurity Labs. Advertencia: Esta herramienta es solo para pruebas de seguridad autorizadas. SmokedMeat existe porque las amenazas a los...

GuardModel

GuardModel Block malicious AI models in your pipeline with one line of YAML. GuardModel is a GitHub Action that automatically scans ML model files for malicious code, vulnerabilities, and security risks in CI/CD pipelines. It blocks dangerous models before they reach production by detecting pickl...

cifswitch-check

cifswitch-check A shell script to check whether a Linux system is exposed to CIFSwitch CVE-2026-46243 — a local privilege escalation vulnerability in the Linux kernel's CIFS/SMB client that has been present since 2007. Runs on bare-metal hosts, VMs, and inside containers. Designed to drop straigh...

Nest

!Issueshttps://img.shields.io/github/issues/owasp/nest?color=blue&style=...

trivysupplychainanalysis

Quantitative Analysis of Multi-Stage CI/CD Supply-Chain Attacks A formally verified, quantitative reconstruction of the March-2026 Trivy / "TeamPCP" GitHub Actions supply-chain compromise CVE-2026-33634 — modeled in TLA+, checked exhaustively with TLC, and quantified with the PRISM probabilistic...

cicd-sensor

🚧 Pre-release: Active development. cicd-sensor is currently in pre-release and under active development. Feedback is very welcome. cicd-sensor Think EDR, but for CI/CD Pipelines. Open-source eBPF-powered runtime security sensor for GitHub Actions and GitLab CI/CD. → Full documentation Demo ---...

gh-workflow-auditor

GitHub Workflow Auditor Workflow auditing tools to identify security issues in GitHub workflows Usage root@kitploit: usage: main.py -h --type repo,org,user --log-level debug,info,warning,error,critical input Identify vulnerabilities in GitHub Actions workflow positional arguments: input User/Org...

CVE-2026-11120-Command-Injection-via-Git-URL-in-CI-CD-Pipeline

CVE-2026-11120 – Command Injection via Git URL in CI/CD Pipeline Program Code Python root@kitploit: cicdbuild.py - Clones repository without sanitizing URL import subprocess, sys def cloneandbuildrepourl: Vulnerability: repourl can contain shell metacharacters cmd = f"git clone repourl /tmp/repo"...

raptor

Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...

gato

!WARNING Este repositorio está obsoleto y archivado Gato ha sido sustituido por Trajan , la herramienta multiplataforma de detección de vulnerabilidades y automatización de ataques en CI/CD de Praetorian. Trajan consolida las capacidades de ataque CI/CD de GitHub Actions Gato y GitLab Glato en un...

Exploit for CVE-2020-1472

C...

GHSA-V5RC-CPWC-CFPR

creationtimestamp| type| source ---|---|--- 2026-08-19 07:31:59+00:00| seen| https://gist.github.com/alon710/048e89a8b6d23388e5627d9e6207e2ad...

GHSA-V2WP-FRMC-5Q3V

creationtimestamp| type| source ---|---|--- 2026-08-19 07:31:59+00:00| seen| https://gist.github.com/alon710/048e89a8b6d23388e5627d9e6207e2ad...

BIT-GITLAB-2026-15423 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to execute CI/CD pipelines on a protected branch without...