2276 matches found
Aura-State
Aura-State Prove your AI agent is injection-safe, in-spec, and won't act out of bounds — before you ship it. A design-time verifier for LLM agents — not a runtime guardrail. Import your LangGraph / CrewAI / AutoGen / MCP agent and Aura proves five things about the agent you already wrote, then...
github-logs
GitHub Logs Extracting OSINT Insights from 15TB of GitHub Event Logs We've developed 3 Trickest workflows that processed and enriched the entire GitHub Event Logs dataset, giving us some valuable insights. Now, the entire community can benefit from these results. Did you know that exactly 16 GitH...
fuzz
GitHub Automation Index This directory stores automation and future-agent reference material for the fuzz corpus. Contents workflows/ - sanitizer and corpus scan automation. instructions/ - path-specific handling rules for ICC, ICC XML, web injection, and repository management. prompts/ -...
agentic-radar
A Security Scanner for your agentic workflows! View Demo · Documentation · Report Bug · Request Feature Table of Contents 1. Description 2. Agentic Visualizer 3. Getting Started Prerequisites Installation 4. Advanced Installation CrewAI Installation OpenAI Agents Installation 5. Usage 6. Advanced...
kubebot
Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...
Playbooks
Table of Content TOC IR Playbooks This repository contains all the Incident Response Playbooks and Workflows of Company's SOC. Each folder contains a Playbook that is broken down into 6 section as per NIST - 800.61 r2 1- Preparation This section should include the following informations List of A...
awesome-dfir-skills
🔥 awesome-dfir-skills A community-driven collection of DFIR / incident response skills : reusable prompts, workflows, and helper files that help practitioners move faster, stay consistent, and maybe—just maybe—get some sleep. 🚀 Quick Start 1. Pick a skill from skills/README.md 2. Copy/paste it in...
PraisonAI - Authentication Bypass
PraisonAI 2.5.6 to 4.6.34 contains a broken authentication caused by disabled default authentication in legacy Flask API server, letting remote attackers access /agents and trigger workflows without token, exploit requires network access to API server. id: CVE-2026-44338 info: name: PraisonAI -...
n8n-RCE
n8n RCE PATCHED Remote Code Execution via n8n Workflows Based on CVE-2025-68613 ⚠️ Made for Educational purposes only 📚 Installation & Usage 🛠️ $ git clone https://github.com/AbdulRKB/n8n-RCE.git $ cd n8n-RCE $ pip install -r requirements.txt $ python exploit.py -u -e -p...
CVE-2026-21858
CVE-2026-21858 n8n Workflow Automation Platform - Remote Code Execution A security research tool for detecting CVE-2026-21858, a critical remote code execution vulnerability in the n8n workflow automation platform. Table of Contents Vulnerability Summary Affected Versions Technical Analysis...
Research-CVE-2026-21858
CVE-2026-21858 Ni8mare: n8n Authentication Bypass & Remote Code Execution 1. OverviewVulnerability Name: Ni8mare CVE ID: CVE-2026-21858 CVSS Score: 10.0 Critical Vulnerability Type: Authentication Bypass, Local File Inclusion LFI, Remote Code Execution RCE Affected Versions: n8n versions 1.65.0 a...
nimux
Pure-Nim network enumeration and remote execution toolkit nimux - Native Operator Toolkit nimux is a native command surface for authorized security assessments. It combines network enumeration, lightweight web discovery, credential validation, Active Directory operations, Kerberos workflows, remo...
bugbounty-arsenal-resources
BugBounty Arsenal Resources Curated workflows, tools and references for bug bounty hunters and web security researchers. What is BugBounty Arsenal? BugBounty Arsenal is a practical web testing platform focused on recon workflows, endpoint discovery and security testing utilities. The goal is to...
AMBER-ICI
AMBER ICI v5 AMBER ICI AMBER Investigative Command Interface is a local-first browser interface for investigative and analytical workflows powered by a local Ollama server. It includes: A single-model Analyst Console and multi-model Parallel execution A user-defined agent chain driven from the ma...
PoC-CVE-2026-21858
PoC-CVE-2026-21858 n8n is an open source workflow automation platform. Versions starting with 1.65.0 and below 1.121.0 enable an attacker to access files on the underlying server through execution of certain form-based workflows. A vulnerable workflow could grant access to an unauthenticated remo...
Attacker Used 4,837 Hijacked GitHub Accounts to Run a CI Secret Stealer in 1,806+ Repositories
Starting Tuesday, an attacker used stolen credentials for 4,837 GitHub accounts to plant a secret stealer in repositories those accounts could write to, according to Aikido Security, a security software company. The stealer is built to take the secrets and cloud credentials that a repository's CI...
CLEANSTART-2026-ZJ07252 deepmerge through 4
Security vulnerability affects the argo-workflows package. deepmerge through 4...
CLEANSTART-2026-BX08883 uri-js through 4
Security vulnerability affects the argo-workflows package. uri-js through 4...