murphysec

中文 | EN MurphySec CLI is used for detecting vulnerable dependencies from the command-line, and also can be integrated into your CI/CD pipeline. Features 1. Analyze dependencies being used by your project, including direct and indirect dependencies 2. Detect known vulnerabilities in project...

confused

Confused A tool for checking for lingering free namespaces for private package names referenced in dependency configuration for Python pypi requirements.txt, JavaScript npm package.json, PHP composer composer.json or MVN maven pom.xml. What is this all about? On 9th of February 2021, a security...

ROOT-APP-MAVEN-CVE-2026-41842 CVE-2026-41842 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2026-41842 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

osv.dev

Documentation Comprehensive documentation is available here. API documentation is available here. Data Dump We have data dumps available from a GCS bucket at gs://osv-vulnerabilities. For more information check out our documentation. Viewing the web UI An instance of OSV's web UI is deployed at...

httpstat

httpstat httpstat visualizes curl1 statistics in a way of beauty and clarity. It is a single file🌟 Python script that has no dependency👏 and is compatible with Python 3🍻. Features Beautiful terminal output — timing breakdown of DNS, TCP, TLS, server processing, and content transfer Structured JSO...

uDork

uDork - Google Hacking Tool Author: M3n0sD0n4ld Twitter: @DavidUton News 11/06/2022 I have some bad news to give, last week Facebook withdrew the service by which the tool made the requests, unfortunately the tool no longer works. Sorry, thank you very much to all the users who have been using it...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

tamago

TamaGo - bare metal Go tamago | https://github.com/usbarmory/tamago Copyright c The TamaGo Authors. All Rights Reserved. Introduction TamaGo is a framework that enables compilation and execution of unencumbered Go applications on bare metal processors. The projects spawns from the desire of...

heisenberg-ssc-gha

Heisenberg Dependency Health Check GitHub Action A lightweight PR guardrail for dependency updates. It scans new or changed dependencies only from your lock/manifest, pulls health and risk signals deps.dev + heuristics, flags fresh publishes, comments a report on the PR, optionally labels it for...

DependencyCheck

Dependency-Check Dependency-Check is a Software Composition Analysis SCA tool that attempts to detect publicly disclosed vulnerabilities contained within a project's dependencies. It does this by determining if there is a Common Platform Enumeration CPE identifier for a given dependency. If found...

dockle

Dockle - Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start Dockle helps you: 1. Build Best Practice Docker images 2. Build secure Docker images Checkpoints includes CIS Benchmarks $ brew untap goodwithtech/dockle who use 0.1.16 or older version $ bre...

Diggy

Diggy Diggy can extract endpoints/URLs from apk files. It saves the result into a txt file for further processing. Dependencies apktool Usage ./diggy.sh /path/to/apk/file.apk You can also install it for easier access by running install.sh After that, you will be able to run Diggy as follows: digg...

informer

Informer - Telegram Mass Surveillance Update 10-20-2025 Security : Fixed high-severity vulnerability CVE-2022-1941 in mysql-connector-python Security : Migrated from deprecated oauth2client to google-auth Updated all dependencies to latest secure versions Fixed quickstart.sh script bugs venv...

venom

Venom C2 Venom C2 is a dependency‑free Python3 Command & Control framework for redteam persistence, built to run on systems without installing packages. It comprises a Flask team server, an Electron operator GUI, and a single‑file Python agent that communicates over HTTP/HTTPS using configurable...

NanoMQ-Memory-Leak-Research

CVE-2026-36590: Denial of Service in EMQ NanoMQ v0.24.9 This repository contains the public advisory and technical analysis for CVE-2026-36590, a denial-of-service vulnerability affecting EMQ NanoMQ v0.24.9. Review Note This repository is public to provide an accessible technical reference for CV...

external_expat-2.1.0_CVE-2022-25313

This repository does not have a README...

autoenum

/ / / // / / // // \ / \ / \ / / / // \ / // // // // / / // // // / / // // // / / / / / ,/ ,/ / / /// // ,/// // // Summary Autoenum is a recon tool which performs automatic enumeration of services discovered. I built this to save some time during CTFs and pen testing environments i.e. HTB,...

SentinelNav

SentinelNav SentinelNav is a zero-dependency, pure Python binary visualization and forensics tool. It transforms binary data into an interactive spectral map, allowing analysts to visually identify file structures, entropy anomalies, code sections, and potential cryptographic blobs. It combines a...

yamaha-smaf-player

Yamaha SMAF Player C++ by Akustikrausch Andreas Wendorf a small, dependency-free player for Yamaha SMAF ringtones .mmf in c++. you hand it one of those files that made your samsung, sharp, or panasonic go deedle-deedle-dee in 2004, and it hands you clean stereo audio. no phone, no firmware, no...

depsguard

depsguard | | | | / |/ \ ' / |/ | | | |/ | '/ | | | | / | \ \ | | || | | | | | | | ,|| ./|/, |,|,|| ,| || |/ Guard your dependencies against supply chain attacks. Single static binary, zero Rust crate dependencies. By arnica Table of contents Overview Install Usage What gets checked Config...