Blitz Identity Provider (Authentication server)

...

guardian-cli

🔐 Guardian AI-Powered Penetration Testing Automation Platform Guardian is an enterprise-grade AI-powered penetration testing automation framework that combines multiple AI providers OpenAI GPT-4, Claude, Google Gemini, OpenRouter, Requesty with battle-tested security tools to deliver intelligent,...

Damn-Vulnerable-Android-Components

The Damne Vulnerable Android Components - DVAC The sieve reborn! Damn Vulnerable Android Components DVAC is an educational Android application intentionally designed to expose and demonstrate vulnerabilities related to various Android components such as Activities, Intents, Content Providers, and...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

cloudlist

Features • Installation • Usage • Configuration • Running cloudlist • Supported providers • Library • Join Discord Cloudlist is a multi-cloud tool for getting Assets from Cloud Providers. This is intended to be used by the blue team to augment Attack Surface Management efforts by maintaining a...

osmedeus

Osmedeus Osmedeus - A Modern Orchestration Engine for Security What is Osmedeus? Osmedeus is a security focused declarative orchestration engine that simplifies complex workflow automation into auditable YAML definitions, complete with encrypted data handling, secure credential management, and...

GHSA-WPFX-QCH4-Q5J2 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-fips, melange, crossplane-provider-aws-kafkaconnect-fips, crossplane-provider-aws-organizations-fips, cerbos-fips, rancher-fleet-fips, flux-source-controller, rke2-cloud-provider-fips, terraform, crossplane-provider-aws-appconfig-fips,...

GO-2026-6607 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, kubernetes-dashboard-fips, melange, kubevirt-cdi-apiserver-fips, crossplane-provider-aws-kafkaconnect-fips, crossplane-provider-aws-organizations-fips, cerbos-fips, ldap2pg, flux-source-controller, nsc-fips, pluto-fips,...

GO-2026-6605 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, kubernetes-dashboard-fips, melange, kubevirt-cdi-apiserver-fips, crossplane-provider-aws-kafkaconnect-fips, crossplane-provider-aws-organizations-fips, cerbos-fips, nsc-fips, flux-source-controller, pluto-fips, rancher-fleet-fips,...

GHSA-F5VF-8PVC-394G vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, kubernetes-dashboard-fips, melange, kubevirt-cdi-apiserver-fips, crossplane-provider-aws-kafkaconnect-fips, crossplane-provider-aws-organizations-fips, cerbos-fips, nsc-fips, flux-source-controller, pluto-fips, rancher-fleet-fips,...

GHSA-22JX-P735-QCPM vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-fips, melange, crossplane-provider-aws-kafkaconnect-fips, crossplane-provider-aws-organizations-fips, cerbos-fips, rancher-fleet-fips, flux-source-controller, rke2-cloud-provider-fips, terraform, crossplane-provider-aws-appconfig-fips,...

GHSA-874M-FCC5-9GQF vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, kubernetes-dashboard-fips, melange, kubevirt-cdi-apiserver-fips, crossplane-provider-aws-kafkaconnect-fips, crossplane-provider-aws-organizations-fips, cerbos-fips, nsc-fips, flux-source-controller, pluto-fips, rancher-fleet-fips,...

CVE-2026-56866 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, kubernetes-dashboard-fips, melange, kubevirt-cdi-apiserver-fips, crossplane-provider-aws-kafkaconnect-fips, crossplane-provider-aws-organizations-fips, cerbos-fips, nsc-fips, flux-source-controller, pluto-fips, rancher-fleet-fips,...

cloudquery

CloudOps, without the chaos CloudQuery is a cloud asset inventory built for platform teams. Sync your cloud infrastructure metadata into your data warehouse, powering insights and automation. Unify data and provide context across AWS, Azure, GCP, and 70+ cloud and SaaS sources such as Wiz, Finout...

overlord

Overlord – Red Teaming Automation Overlord provides a python-based console CLI which is used to build Red Teaming infrastructure in an automated way. The user has to provide inputs by using the tool’s modules e.g. C2, Email Server, HTTP web delivery server, Phishing server etc. and the full infra...

dnscontrol

DNSControl DNSControl is Infrastructure as Code for DNS. It includes a full-featured configuration language Javascript-compatible, plus "plug-ins" that speak to DNS provider APIs such as AWS Route 53, Cloudflare, and Gandi. It can send the same DNS records to multiple providers. It runs anywhere ...

cerebro-red-v2

CEREBRO-RED v2 Research Edition Autonomous Local LLM Red Teaming Suite A research-grade framework for automated vulnerability discovery in local LLMs using Agentic Fuzzing and Adaptive Adversarial Mutation AAM. Research Goals Implement PAIR Algorithm Prompt Automatic Iterative Refinement from...

lsarelayx

lsarelayx Introduction lsarelayx is system wide NTLM relay tool designed to relay incoming NTLM based authentication to the host it is running on. lsarelayx will relay any incoming authentication request which includes SMB. Since lsarelayx hooks into existing application authentication flows, the...

checkov

Checkov is a static code analysis tool for infrastructure as code IaC and also a software composition analysis SCA tool for images and open source packages. It scans cloud infrastructure provisioned using Terraform, Terraform plan, Cloudformation, AWS SAM, Kubernetes, Helm charts, Kustomize,...

PhantomFS

PhantomFS ProjFS provider. Projects files where the content depends on which process reads them. Payload is stored AES-256-CBC encrypted on disk, decrypted only in memory at runtime. This shouldnt bypass any EDR as the payload will be written to disk when allowed processes try to read it...