#应用安全
200
2026-09-23
Show HN: Drop – A rootless Linux sandbox with gVisor support
A
I created Drop because I always felt uneasy installing and running third-party programs using my main user account. A single compromised dependency means a full compromise of the system. What is even worse, because I ship software from my computer, a single compromised dependency can lead to compromise of all the users of my software. Containers and VMs are one solution, but for local work, they are often detrimental to productivity. It takes effort to configure a machine with all the tools and configs needed for productive work, but a container or a VM will be stripped of all these tools. This is great for production deployments, where the aim is a reproducible system with minimal dependencies, but can get in the way of productive local work. Drop is language independent, but the workflow is inspired by Python's virtualenv. With virtualenv the environment isolation is only a convention that relies on installed dependencies being good citizens. With Drop the isolation is enforced. Each Drop environment gets its own writable and easily disposable home dir, with only selected config files and dirs from the original home mounted, mostly read-only. Drop uses Linux namespaces for isolation (user, mount, network, PID, IPC, cgroup), doesn't require root and, as an option, uses gVisor user-space kernel, which adds protection against exploiting host kernel vulnerabilities to escape the sandbox. I don't want to make the introductory post too lengthy, but I'm here to answer any questions and give any additional technical details. Note: This is my 3rd submission of the project, the first two did not draw attention. Since then I have added support for gVisor and created a project website to better explain the concept and organize documentation.
2026-09-29
Show HN: OpenAPPA – open-source deterministic guardrails that don't break agents
A
Hi Hacker News! Matvey, one of the authors, is here. While building enterprise agents, we ran into a problem: the more tools you connect to the AI, the higher the chance it will run out of control and leak sensitive data. Guardrails, in theory, should prevent this, but the situation is worrying: - Non-deterministic guardrails (LLM as a judge, auto modes, etc.) are vulnerable to prompt injections, or they lack knowledge of the data, making them inefficient (~10% data leaks on our benchmarks). - Existing deterministic guardrails (Cedar, OPA, FIDES, Dogwood) require massive case-specific IF-ELSE-like policies and break agents (~59% utility loss on our benchmarks). We did something differently. We’ve taken the best of existing deterministic guardrails and built a policy language that is data-specific, not use-case specific. It lets you scale agents without updating a policy. On top of that, we’ve added multiple tricks (like a remedy plan or a DualLLM pattern) to help agents operate within those restrictions, raising utility from ~40% to ~90% and making it the first deterministic guardrail that doesn't break agents. Finally, we’ve designed it to be pluggable into any agent loop with pre- and post-tool-call hooks. We invite you to check out our benchmarks: https://www.openappa.com/evaluation Play with it in Claude Code: https://www.openappa.com/claude-code Try plugging it into your agent: https://www.openappa.com/add-to-agent Or check the academic paper: https://arxiv.org/abs/2607.24625 We'd love to hear any feedback!
2026-09-27
graygnatconsole/mcp-audit-tool
A
🛡️ Security audit CLI for Model Context Protocol (MCP) servers — scan AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection & supply-chain risks. Pure Python, SARIF + CI ready.
2026-09-15
Matthew0822/ToolReplay
A
Audit AI agent tool-call transcripts: hash-chain sealing, deterministic replay, and scope overreach checks. Dependency-free Python CLI.
2026-10-01
Show HN: I built a free Burp/Caido alternative but, zero setup - API Testing
A
This is Katriel, the architect of the tool APIaxess. I have been API pentesting for a good time now, and starting with API pentesting was a bit of a rough patch. Specially the setting up and having to know the intricacies of proxies, networking and other stuff. Then once i got through it, the next rough patch was the apk pentesting, where getting the traffic of any apk was more of a task then the pentesting itself. So i started by writing scripts that automates the process and then made sure that any rooted adb just automatically started sending traffic to the burpsuite setup, and then that helped a lot. Then i just thought that this issue needs to be resolved in a more open manner, since its a very known pain point. So i built a GUI around it, made sure that it can handle everything that a normal api traffic tool can and then thought of releasing it, for people to test it out. Before the inital release, i have myself battle tested this tool, in multiple ways, while also sharing it with other professionals in my industry who constantly use Burp/Caido/HTTPToolkit or other similar tools. I know that the tool needs more features and more refinements, but thought of making it public so that i can get to know about the issues much sooner. Do check out the Github and leave a star if it helped you out, and do share it with your colleagues so that they could also waste less time setting it up and more time doing the work that they like. github.com/KatrielMoses/apiaxess
2026-10-23
assetnote/php2shell-scanner
A
High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)
2026-10-22
HOSTED-POWER/php_uploadprogress_guard
S
Protects an unpatched PHP against php2shell (CVE-2026-109618 / CVE-2026-109619): a small extension that mirrors the official fix component by component and steps aside once the engine carries it. PHP 5.6-8.5; Sury, cPanel EA4, DirectAdmin, Docker, Windows.
2026-08-29
mhtsec/nacos-authscope-poc
S
Nacos 3.x (3.0.0~3.2.3) auth scope misassignment: unauthenticated admin account creation & full takeover PoC, fixed in 3.2.4
2026-09-05
san3ncrypt3d/vulnometry
A
Measure what a vulnerability is worth to your business, not how severe it is in the abstract. Business Exposure Index scoring over NVD, EPSS, CISA KEV, OSV and GHSA.
2026-11-07
oz9un/sshole
A
openssh on musl accepted any 257+ char password for accounts with no password. since 2016. check.sh, poc, patch.
2026-10-22
9bie/php2shell-bypass-aslr-exp
A
A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.
2026-10-02
Tuskira/ai-agent-gateway
A
AI Agent Gateway - an open-source gateway that secures, governs and observes AI agents' MCP tool calls and LLM traffic
2026-09-04
ByteV0rtex/CVE-2026-65343
A
CVE-2026-65343 PoC — AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71)
2026-08-31
KorekKayu/IKONA-Security
A
🛡️ Comprehensive Cybersecurity Arsenal, Bug Bounty Payloads & Security Audit Tools by IKONA ONI
2026-10-07
Show HN: MailAccess – the true Email OSINT framework
A
Im a security engineer and i built mailaccess. When i started learning pentesting, i came across multiple lectures and notes of people listing out tools and websites, which gives the emails for a particular domain, and almost all of them mentioned that the tool might not stick, so its better to learn the methodology, rather than learning a tool- that stuck with me. As i was beginning to really get into pentesting i noticed a clear lack of email osint methodology through the tool itself - so i thought of building one myself. I researched email osint methodoliges and identity chaining in depth to really get this tool the exact brain that a human would use, the reasoning of each action and the scoring behind each of it. Then after learning i just put it all together, and people really liked ita nd supported it, because it gave the truth rather than just filling it with names, it doesnt give a list, it gives sections, where it came from and how. Thats exactly what i wouldve wanted when i was first learning, a tool that familiarizes with what each source gave, and what was found. Do check it out, i have made a hosted version so that people can route everything through that, and that also has been going very well, all thanks to the community and the solid supporters throughout. github.com/KatrielMoses/MailAccess
2026-11-02
Verlintas/NOIR
A
手机隐私审计：用 adb 扫出 Android 应用的权限、上报端点与数据流向，并给出可回滚的处置。Desktop Android leak audit: permissions, endpoints, data flows, reversible fixes.
2026-09-25
angusdevgo/Seep-Reverse-Lab
B
Agent-Native multi-platform reverse engineering and CWE-602 client-side authorization audit workbench.
2026-09-23
Matthew0822/MCPBastion
A
Zero-trust security gateway between AI agents and MCP servers: scoped capabilities, redaction, rate and cost limits, and verifiable session logs.
2026-09-16
ustayready/Thunderstorm
A
A collector and derivation engine. It maps your environment, evaluates effective permissions and trust, and writes a complete attack graph as a single .rage.ndjson file. The input to everything else.
2026-09-12
forefy/reburp
A
A Burp Suite extension that exposes the full Montoya API as a local REST API, with Swagger UI
2026-08-23
DavidCarliez/cover
A
Reversible privacy proxy for AI agents: send realistic fakes, restore originals locally.
2026-10-23
Spectrmachina/Ztrust
B
Zero-trust supply-chain security for open source: detects malicious & vulnerable dependencies, typosquats, leaked secrets and unsafe GitHub Actions — and pays independent researchers in shielded Zcash via a front-running-proof bounty protocol.
2026-10-23
aancw/php2shell-scanner
A
Scanner for PHP2Shell (CVE-2026-109618/109619): URL blackbox, local device and SSH.
2026-10-20
opentrap/opentrap
B
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
2026-10-03
dahvidschloss/Defender-Bender-Box
A
A Docker container running the x64 Windows Defender engine to scan files for malware. Put suspicious files in the box; let Docker bend Defender; get a local scan result
2026-09-29
kofiadeyemiq/action-dist-verify
A
Rebuild the JavaScript GitHub Actions your workflows pin and check that their committed dist matches the source.
2026-10-25
songjianyang/xss-audit
A
Static XSS audit skill with 14 layers of checks for React, TypeScript, and JavaScript projects.
2026-10-14
MrLouisWright/csp-forge
A
Scan a built static site (dist/, build/, out/) or live URL and generate a tight Content-Security-Policy with sha256 hashes for inline code. Outputs header, meta, Nginx, Apache, Netlify, Vercel, Helmet, JSON; --check mode for CI.
2026-10-12
casareanderson/sieve
A
Find the CVEs that matter on a Linux box and its running containers. Reads the package lists already there, asks OSV.dev, ranks by CISA KEV and EPSS. No scanner binary, no database, no server.
2026-09-27
mahaloz/ilio-mini
A
A tiny infrastructure for Codex to solve CTF challenges in reverse engineering. 3rd in Flare-On 13.
2026-09-26
agentscope-ai-java/json-guard
B
JSON.parse with hard limits on nesting depth, key count, string length and input size. Refuses parser bombs before they are allocated.
2026-11-05
MotherSphere/NIKKE-Launcher-Check
A
Read-only check for traces of the November 2026 NIKKE PC launcher compromise. Windows, Linux (Proton, Steam Deck) and macOS.
2026-10-26
tenhkspark/secbrief
A
A daily vulnerability briefing for AI-agent-managed machines — deterministic matching against OSV + CISA KEV; the LLM only explains. MIT
2026-10-22
mikensec/php2shell-lab
A
Offline, reproducible lab to safely analyse an untrusted PoC for CVE-2026-109618/109619 and build detection rules. No exploit included; bring your own sample.
2026-10-12
datosh/nixos-vex
A
OpenVEX feed and NixOS module to manage NixOS CVEs, evaluated against your system's configuration.
2026-09-28
SecFathy/xss-specialist
B
KEV-gated continual-learning XSS specialist with execution-authoritative browser verification
2026-09-20
ayandexyz/glance-linux
A
Face unlock for Linux with real liveness detection: a PAM module, a daemon, and an Omarchy lock screen indicator
2026-09-06
TheCruZ/BootViewer
A
Windows Measured Boot viewer & TPM verifier. See exactly what your PC measured at boot. Decode the Windows TCG/TPM event log, explain each entry, verify PCRs against the real TPM and spot tampering, Secure Boot issues or unexpected drivers.
2026-09-05
britsman/WasmQuay
B
Offline WebAssembly component inspection and capability-policy toolkit - decode .wasm binaries, classify host capabilities, gate against explicit policies. Rust + TypeScript, zero dependencies.
2026-08-25
ADScanPro/Claude-AD
A
Active Directory pentest methodology for Claude Code: skills, agents and slash commands for internal AD red-team work (Kerberoasting, ADCS ESC1-17, DCSync, ACL abuse, NTLM relay, delegation), OPSEC telemetry and DORA/NIS2/ENS mapping. Drives netexec, impacket, certipy, bloodyAD, BloodHound CE.
2026-11-03
dis0rder0x00/TrustedHive
A
LPE Proof-of-Concept for Windows 11 abusing TrustedInstaller's Component Based Servicing (CBS) session COM object and junctions for arbitrary file write.
2026-09-25
rudratoshs/buried-injections
A
🛡️ Regex catches 0%, Meta's Prompt Guard 2 catches 1% of 629 realistic AgentDojo injection attacks when they're buried in tool output. Reproducible benchmark.
2026-10-19
Fazmin/cve-intel
A
Local security intelligence for CVE triage - 31 data sources and 32 tools, risk scores and an MCP server for AI agents, all in native Rust. Private by default.
2026-10-09
Maldev-Academy/ApiHashing
A
Windows x64 API hashing library that bypasses EAF and resolves forwarded exports, ordinals, and api-ms-*/ext-ms-* API Set DLLs.
2026-09-18
marcosd4h/wesp-research
A
Technical documentation, reverse engineering research, and tools for the Windows Endpoint Security Platform (WESP).
2026-09-04
Tcotl/AgentCapture
A
嵌入式蜜罐与 AI Agent 反制平台：23 种 Agent 指纹识别 + 功能性伪装收编 + 对话式 C2 + 交互式 SSH 蜜罐与会话回放，实测五款主流 Agent 全部反制上线。
2026-11-08
arnold117/iOS-NOIR
A
No-jailbreak iOS privacy, entitlement, sandbox & telemetry forensic auditor (inspired by Verlintas/NOIR)
2026-10-29
Ping-2o/duper-cves
A
cves localised in the 24A435->24B115 binaries (iPhone17,5), currently 36
2026-10-24
theorem-labs/oss-verify
A
OSS Verify: enrollment and build instructions for formally verifying open-source fuzz targets
2026-10-23
mpyw/php-eol-CVE-2026-109618-109619
A
PHP 7.4 / 8.0 / 8.1 Docker images with the CVE-2026-109618 / CVE-2026-109619 fix backported
2026-09-25
valeria-org/bitwright
A
Bit-vector expression simplifier for binary analysis and deobfuscation
2026-09-17
dmtrKovalenko/bashka
B
Stop running unverified bash scripts to install software! curl <url> | bashKA for static verification of bash script safty and managing installed software
2026-09-12
xusheng6/windows-wesp-research
A
Reverse engineering and live validation of the Windows Endpoint Security Platform preview
2026-09-07
dinosn/mikrotrick-poc
A
CVE-2026-67276 RouterOS SSH public-key authentication bypass lab PoC
2026-09-01
alotiho/osintPanel
B
Open-source OSINT panel for WHOIS, IP geolocation, email, and SSL certificate lookups — with a bundled desktop UI.
2026-10-29
jmanico/grim-prompter
B
Threat modeling for AI coding agents: point Claude Code, Codex or any agent at your repo and get an evidence-traced threat model. 36 architectures, 29 methods, MIT.
2026-10-21
ikow/php2shell-poc
B
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
2026-09-23
aimardcr/ReCam
B
Android virtual camera for security testing. Injects frames into cameraserver so any app sees a video file, desktop stream, or webcam instead of the real camera.
2026-09-18
devanshbatham/commit-miner
B
Classify Git commit diffs and messages with Jev. Bug fixes, security fixes/CWEs, and change types.
2026-09-15
haoliyang/PhishDrill
B
PhishDrill 是一套零第三方依赖的开源钓鱼演练平台:不用搭 C2、不用买商业平台,一台内网机器(甚至一台笔记本)即可完成「发信 → 埋点 → 去伪 → 归因到人 → 报表交付」的完整钓鱼攻防测试,并提供浏览器管理控制台与实时态势大屏。
2026-09-13
crypt0p3g/adexsnap
B
Active Directory snapshots from Linux and macOS in the AD Explorer .dat format. Opens in AD Explorer, works with ADExplorerSnapshot.py and BOFHound.
2026-09-08
ynsmroztas/KeySniper
B
**CVE-2026-18963** — unauthenticated Keycloak account takeover via the reset-credentials flow.
2026-08-25
HotStartLabs/glassbox
B
Client-side browser-fingerprint bench — see what any website can measure about your browser, and how identifiable you are. Live: https://glassbox.codecanary.org
2026-10-26
joelhooks/lockjaw
B
🔐 Egress credential injection for agents: agents hold placeholders, the cell fills real keys at the edge for approved hosts.
2026-10-25
trailofbits/brotli-checker
B
Claude Code and Codex skill for finding potentially vulnerable Brotli copies and guiding updates for CVE-2026-111497.
2026-10-01
Jinssi/AuthFlowMap
B
Interactive map of OAuth, Conditional Access, Entra Agent ID and MCP authentication flows, step by step
2026-09-24
jpolec/hetzner-cloud-audit-skills
B
Evidence-backed attack paths, drift, and cost auditing for Hetzner Cloud.
2026-09-13
crypt0p3g/adexview
B
Browse, search and audit AD Explorer snapshots offline in your browser: decoded attributes, LDAP filters, and reports for what BloodHound doesn't show (DNS, subnets, DFS, GPO links, LAPS, AD CS).
2026-10-27
hyperbob-labs/hyperlang
B
Run untrusted Erlang inside an Elixir host, on the same BEAM, with no ambient authority.
2026-10-24
getastra/php2shell-triage
B
Defensive triage for PHP2Shell (CVE-2026-109618 and CVE-2026-109619): a read-only check of every PHP SAPI, plus indicator hunting and a patch plan.
2026-10-19
interplains/zero-breach
B
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
2026-10-14
MrLouisWright/header-sentinel
B
CI-friendly CLI and API that fails builds when deployed URLs are missing or misconfigure HTTP security headers (HSTS, CSP, COOP, cookies...) with specific fixes. JSON & SARIF output.
2026-10-14
rorywag/Hayabusa-Bulk-Runner
B
Bulk-run Hayabusa across a folder of KAPE collections, one run per host, with per-host reports and a cross-host triage dashboard
2026-10-01
0xPrimo/ExecuteAssemblyPICO
B
A Position Independent Code (PIC) implementation of the execute-assembly command, using Crysta Palace linker.
2026-09-27
agentscope-ai-java/redis-guard
B
Block FLUSHALL, KEYS and other dangerous Redis commands by policy, before they reach production.
2026-09-13
v-pun215/Tourmaline
B
Reverse engineering notes, IOCs, and deobfuscated source for a ClickFix Python RAT that calls itself Tourmaline.
2026-09-07
biusberline/cloudflare-turnstile-solver
B
A small Python library and CLI for working with Cloudflare Turnstile on your own pages - read the sitekey, build the token, verify the result.
2026-10-15
jburgess-r7/CVE-2026-97229-PoC
B
GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64 image
2026-09-25
Lakr233/amfi-allow
B
Let an ad-hoc signed binary carry Apple-private entitlements on macOS, by cdhash, without patching amfid
2026-09-13
grah4na/prism
B
Differential fuzzer that finds HTTP parser discrepancies across 54 servers to uncover request-smuggling primitives.
2026-09-10
sashyo/minidauth
B
Mini decentralised auth. Gives an existing auth system a key nobody holds, with governance over who can decrypt.
2026-09-05
programasweights/pii
B
Detect and type PII locally with one ProgramAsWeights neural program.
2026-10-24
dimasma0305/CVE-2026-111497-POC
B
Reproducible local Brotli decoder proof for CVE-2026-111497 with a self-checking tuned RCE harness
2026-10-04
RicoKomenda/agentic-chaos
B
Security chaos engineering for AI agents and LLM applications
2026-08-25
MaxHu-xuan/chat-archive-guard
B
Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.
2026-10-29
MchinaMd57764/CVE-2026-112706-CoreMedia-fd-leak
B
Independent discovery & coordinated disclosure: CoreMedia bytestream XPC (mediaplaybackd) vended live file descriptors for protected paths to any sandboxed app on iOS 26.5–27.0.1. Fixed in iOS 27.2 as CVE-2026-112706. PoC + evidence.
2026-10-27
OpsecGuy/Nuclei-Remote
B
Chrome extension for running Nuclei scans on your own server, with API key authentication, configurable rate limits, live logs, scan history, and downloadable results.
2026-10-17
gungnir-sanye/tee-attestation-extraction
C
Android TEE/KeyMint 技术研究：Keybox 与 RKP/DICE 原理、三台设备实践记录和验证方法 | Android TEE/KeyMint research notes on Keybox, RKP/DICE, and three device studies.
2026-10-14
THREATBYTES/Malware-Analysis-Report-Template
B
A standardised malware analysis report template with a JSON Schema and Markdown format mapped to MITRE ATT&CK. Validate, share and compare reports consistently. Part of ThreatBytes.
2026-10-03
kyle41111/AI-FILE
B
A listener profile for the Mythic C2 framework that utilizes AI vendors file API's
2026-09-27
agentscope-ai-java/duckdb-extension-audit
C
Audit which DuckDB extensions a project loads, their origin and signature state, and flag unsigned loading.
2026-09-25
Show HN: Air-gapped file encryption as self-decrypting HTML page
C
Air-gapped file encryption packed into a single, self-decrypting HTML page. Repo: https://github.com/ApelegHQ/ts-cms-ep-sfx I was inspired by self-extracting archives. I wanted to share files with basically no dependencies. The goal was: 1. Something that didn't require any installation (assuming a web browser) 2. Have a single file with no network that could self-decrypt 3. Be fully auditable The second point is done by having (sort of(*)) reproducible builds and embedded OpenPGP signatures. The first point is made by cleverly manipulating the HTML structure so that it can decrypt without breaking the PGP signature. It can even decrypt using bare openssl (which was a design goal too, though getting the exact structure right took some work and bug reports). The third point is accomplished by the first two, and by the source being freely available. (*) Depends on the OS at the moment.
2026-09-15
0xjohnnydev/airlift
C
AirLift — paired-Mac AirTraffic/ATAirlock sandbox escape for iOS 27.0
2026-09-07
pigeonlabsHQ/pigeon
B
Delegated authority for AI agents. A Pigeon Pass says what an agent may do.
2026-08-29
haraldalder-vibemogger/vibe-audit
B
Проверь свой навайбкоженный проект на дыры до того, как это сделают боты 🩺
2026-10-26
assetnote/node2shell-scanner
B
High fidelity detection mechanism for node2shell (CVE-2026-111497)
2026-10-22
JoasASantos/php2shell-scanner
B
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
2026-10-22
dinosn/php-cve-2026-10961x-lab-poc
B
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
2026-09-19
crypt0p3g/adnullenum
B
One-pass anonymous Active Directory enumeration over SAMR and LSARPC — null session, no credentials, with structured reusable output.
2026-09-18
armourinfosec/surfacemap
B
Maps one authorized web origin's attack surface: hosts, technologies, routes, parameters, identities and trust boundaries, delivered as an evidenced, ranked hand-over document before a single payload is sent. Client-side JavaScript analysis is the engine underneath. For authorized security testing only.
2026-09-17
mlcsec/ResetSpy
B
Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal
2026-09-13
m0m0x01d/strata
B
See why a web vulnerability works, not just how to trigger it — a single-file, zero-dependency security lab that renders a vulnerable app as a 7-layer cross-section. 17 labs, attacker & defender modes, AI-authorable.
2026-09-08
Show HN: Stuxnet – A reconstructed source code of the infamous cyber-weapon
C
Stuxnet! Here reproduced by me. Only researchs educations purposes.
2026-08-27
picodoki/linux-privesc-lab
B
Linux 权限提升漏洞靶场（linux-privesc-lab) : 17 个独立 Docker 漏洞环境（sudo、SUID、capabilities、cron、/etc/passwd、/etc/shadow、LD_PRELOAD、BASH_FUNC、MySQL UDF）每个环境包含一键利用脚本、手动分步教学与原理详解，开箱即用，镜像加速，类似vulhub靶场
2026-11-09
avivgerz-hue/vibe-shield
B
60-rule static security scanner, MCP server & skill poisoning auditor for AI-generated codebases (Claude Code, Codex, Cursor).
2026-11-04
Arcanum-Sec/SpikeStrip
B
Reversible HTML and JavaScript prompt decoys with opaque per-insertion keys.
2026-10-22
hassan-algo/open-sesame
B
🔓 An AI web-pentest skill for Claude Code. Point it at a site you're authorized to test — it maps the attack surface, works through the OWASP WSTG, validates findings, and writes dev + stakeholder reports (PDF).
2026-10-12
scs0209/laya-guard
B
Free local guardrail for AI coding agents: every tool_call judged on-device (regex + Laya), allow/review/block
2026-10-07
oscardagrach/qualcomm_pbl_siglen_bug
B
Notes on RSA signature length handling in the Qualcomm PBL secure boot verifier.
2026-10-06
Blackfrost-AI/Cyber-Frost-Harness
C
Native red, blue, and purple security-agent harness for CYBER-FROST
2026-10-04
kobasky17/SecurityToolkit
B
Triage de seguridad para Windows (procesos, red, tareas programadas, persistencia, Windows Defender) con veredicto en lenguaje simple. 100% portable, open-source friendly, creada por @kobasky para su comunidad.
2026-09-24
halilozturkci/dfirswarm
B
A swarm of forensic agents, on your machine, on the record. Open-source agentic digital forensics and incident response under the AGPL: agents divide the case on a shared board, forge their own tools, and leave a hash-chained record.
2026-09-16
janice20435/cf-turnstile-token
C
Command-line Cloudflare Turnstile token generator: discover the sitekey on any page and print a cf-turnstile-response token for your scripts, tests and CI.
2026-10-29
turayevr12-spec/defiguard
B
Heuristic Solidity/DeFi security review toolkit — flags suspicious patterns to review, backed by Foundry scenarios. Educational / authorized use only.
2026-10-22
0xrsydn/php2shell-scan
B
Reachability + change detector for the php2shell PHP RCEs (CVE-2026-109618 / CVE-2026-109619). Agent-ready, stdlib only, read-only by default.
2026-10-21
kernelstub/Pwnbox
B
Privacy focused NixOS pentesting environment with a customizable desktop and security tools.
2026-10-20
0xPrimo/DemonLdr
B
A PoC of User-Defined Reflective Loader for Havoc Framework built with Cystal Palace
2026-10-10
kutukam/autonomous-pentest-agent
B
Autonomous Pentest Agent — LLM multi-agent autonomous penetration testing system (Go backend + Next.js UI). AGPL-3.0.
2026-10-01
batrapulkit/squidbrake
B
Brakes for your AI agents: every tool call is checked against your rules, held for human approval when risky, and recorded in a tamper-evident audit trail. Works with Claude Code and any MCP app.
2026-09-23
Malwation/CVE-2026-43786
B
Proof of concept for CVE-2026-43786, a local privilege escalation vulnerability in macOS CoreServices that allows an application to gain root privileges.
2026-09-16
QiantangCredit/heimdall-pentest
B
An autonomous AI agent framework for authorized penetration testing
2026-09-06
disrex-group/stylesmuggler-mitigation
B
Emergency mitigation for StyleSmuggler, the unpatched Magento/Adobe Commerce RCE (Sansec, 2026-09-05). Web-server rules + CLI guard + compromise scanner.
2026-09-06
nexovir/Forbidra
B
A bug bounty tool for bypassing 401/403 access restrictions and testing endpoint accessibility.
2026-11-09
Rust505/CVE-2026-112611
B
CVE-2026-112611: OOB Write in CoreGraphics (PDF ShadingType 5) via /N and /C0 array mismatch. Causes heap overflow (DoS). The Python PoC generates the malicious PDF, while the C-code uses a SIGSEGV handler to map the faulting memory and confirm the write primitive.
2026-10-29
Ping-2o/CVE-2026-112611-cg-shading
B
CVE-2026-112611/112610: CoreGraphics PDF out-of-bounds writes (fixed in iOS 27.2) — fix-diff analysis, on-device proof, methodology, and PoC generator scripts. No prebuilt PoCs, no crash reports.
2026-10-24
whokilleddb/TTs
B
Gain shellcode execution via T4 Text Transform files/TextTransoform.exe
2026-10-23
cookiengineer/actual-php2shell
B
:robot: NO, There is an easy way to exploit this vulnerability! (vibecoded to prove a point)
2026-10-09
PranilShah-08/Nested-Adversarial-Containment
B
Empirical evaluation framework for multi-agent safety, adversarial breakout, and containment dynamics between autonomous LLMs under operational survival pressure.
2026-09-28
pho5nix/Red-Team-GOAD-Lab-Proxmox
B
Build guide for Red Teaming home lab. GOAD lab setup in Proxmox and pfSense, Operator/C2 and Redirectors.
2026-09-20
mdpsec/should-i-submit
B
A local, safety-first pre-submission reviewer for bug bounty reports.
2026-09-19
c1osed1/FaceMac
B
Open-source face unlock for macOS — look at your Mac and it types your saved password at the lock screen. On-device SFace, Face ID style notch animation. Free, private, GPL-3.0.
2026-09-17
DevCop95/dev101x-pentest-lab
B
Self-contained Docker Pro Lab for pentest practice: boolean blind SQLi + hashcat cracking, web path traversal, command injection, internal network pivoting and SUID PATH-hijack privesc — with live flag validation and completion certificate. No VPN needed.
2026-08-29
CSPF-Founder/red-clippy
B
open-source pentest management built to be operated by an AI agent
2026-08-25
MaxHu-xuan/artifactproof
B
Verify that the PowerPoint you are about to deliver is exactly the PPTX that passed QA—locally, offline, and with tamper-evident evidence.
2026-11-03
mhfed/vn-law-check
B
Audit pháp lý website theo luật Việt Nam (BVDLCN 91/2025, TMĐT 122/2025, ANM 116/2025, AI 134/2025) cho Claude Code, Cursor, Copilot, Windsurf, Cline
2026-10-22
0x4148/CVE-2026-109618-php2shell-lab
B
PHP2Shell (CVE-2026-109618 / CVE-2026-109619) Docker lab and PoC. Use-After-Free in PHP's session.upload_progress.
2026-10-21
eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC
C
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
2026-10-21
syhunt/php2shell-protection
B
Emergency Apache mitigation and testing toolkit for php2shell (CVE-2026-109618 / CVE-2026-109619), featuring multipart POST blocking, request-size limits, and additional hardening measures.
2026-10-08
3rab1Dev/SecretSieve
B
Intelligent, local-first secret detection CLI for finding exposed credentials using signatures, entropy, context, and deterministic confidence scoring.
2026-08-28
zack0x01/XSS.pdf-Credential-Harvesting-PDF
B
A proof-of-concept PDF file designed for authorized security testing of PDF upload functionality and PDF viewer behavior, including XSS and credential-harvesting scenarios.
2026-08-27
dinosn/log4j-4255
B
End-to-end Docker lab reproducing Apache log4j2 #4255 — FilteredObjectInputStream allowlist bypass via java.rmi.MarshalledObject (unfiltered deserialization → RCE) on Log4j 2.26.1 / JDK 17.
2026-10-23
Anton-Barinov/php2shell-patches
B
php2shell (CVE-2026-109618/CVE-2026-109619) emergency patches for old PHP 5.6/7.x/8.0/8.1 — official + community backports, enhanced universal patch keeping file uploads & progress bars. For OpenCart, WordPress, HestiaCP/VestaCP legacy servers. EOL PHP RCE fix.
2026-10-17
kamalx06/TornadoC2
B
Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go binary agent with every property baked in at build time. Multi-operator team server with RBAC, audit chain, and a Qt/CLI console. Linux + Windows, amd64 + arm64.
2026-10-01
pkhabazi/SentinelToXDR
B
Assess, convert and deploy Microsoft Sentinel analytics rules as Defender XDR custom detections
2026-09-28
0xtbug/Recat
B
A local workspace for security findings. Review findings from Hermes or other agents, inspect evidence, and export reports. Recat supports Web, Smart contract, and Other assets, including mobile, desktop, networks, and hardware.
2026-09-21
BillyBobMcgee/footprint-osint
B
Defensive OSINT exposure checker: see what an email, password, domain or username leaks in public breach data. No API keys. CLI + local web GUI.
2026-09-19
sene4kin/sfmc
B
Статический анализатор JAR файла. Разбирает есть ли в коде то, что может навредить
2026-09-18
bl4ckarch/go-responder
C
Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
2026-09-10
Supersonic/TLPE
C
CVE-2026-49881, a logic issue in the InCallController class in Android 17's Telecom service that allows an unprivileged app to gain arbitrary code execution as UID 1000 system_server
2026-08-27
ioallocate/imMapper
B
Demonstration of Abusing the Vulnerable driver AmdTools64.sys for Physical R/W.
2026-11-05
AzozzALFiras/iOS-Research
B
Static reverse-engineering notes, patch-diffs, and trust-boundary analysis of modern iOS
2026-10-27
qybaihe/bla
B
🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.
2026-10-20
TwoSevenOneT/PhantomBuffer
B
EDR evasion uses stealth injection via SendMessage with WM_SETTEXT to effective bypass EDR (Endpoint Detection and Response)
2026-10-07
tsale/jevline
B
Jevline: start from one confirmed-malicious process; Jev links the rest of the incident into a timeline, execution chain and evidence table.
2026-09-28
PanosoikoGr/adaptix-kerbrute
B
In-process Kerberos user enumeration and password attacks for AdaptixC2 — no process spawn, no file drop.
2026-09-27
Mister-iks/pcybox-attackgraph
B
Open source browser lab to build a simulated infrastructure, watch an attack move through it, and check whether your defense works.
2026-09-26
Demet5292/cf-clearance
C
Get a valid cf_clearance cookie from the Cloudflare Challenge automatically - Python library, CLI and examples, one REST call, no browser required.
2026-09-25
petermalone/CVE-2026-84543
B
Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability
2026-09-24
muratcakmak/jev-guard
B
Probability-scored guardrails for Claude Code: deny rule-breaking edits and unasked-for deploys, route your docs into each prompt, and check the final answer against the turn's own evidence.
2026-09-17
bytemonk-academy/owasp-agentic-lab
B
Weekend lab for the OWASP Top 10 for Agentic Applications. Build an agent, break it five ways, then harden it.
2026-09-16
shaheeryasirofficial/SmuggleMyPayload
B
SmuggleMyPayload generates HTML pages that embed and reconstruct files client-side using JavaScript. The toolkit offers multiple HTML Smuggling techniques, payload encoding options, JavaScript variations, and pre-built HTML templates.
2026-09-14
shaikarifali/bundlebleed
B
AI/LLM-assisted JS Recon and vulnerability triage for authorized bug bounty testing & pentesting — scope-gated, passive-by-default, human-verified
2026-09-10
g0h4n/PassTheCert-rs
B
Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀
2026-09-07
wbso-ai/omarchy-plugin-security-skill
C
Agent skill and field guide: the security pitfalls that block Omarchy plugins on the marketplace, from 5,000+ maintainer reviews
2026-10-22
wakemeiflose/php2shell
B
CVE-2026-109618 / CVE-2026-109619 — PHP session.upload_progress RCE PoC & Vulnerable Lab
2026-10-08
secblitz/Secblitz
B
Maximize Windows security and privacy in one click. Fixes security holes and misconfigurations, removes bloatware, and blocks ads, trackers and malware.
2026-09-28
Adversarial-Detection-Engineering/adeskills
C
Adversarial Detection Engineering knowledge base — ADE taxonomy, worked technique files, platform bug patterns, mitigations, and purple-team scoping tooling.
2026-09-25
dinosn/cve-2026-87902-wordpress-lfi-lab
B
Reproduction lab + URL-list scanner + PoC for CVE-2026-87902 / GHSA-7hp8-65ch-5whp — WordPress get_page_template() unauthenticated LFI to conditional RCE (WP 4.7.0-7.1.1, fixed 7.1.2). Authorized/defensive testing.
2026-09-13
SyntaxMethod/CVE-2026-42978-PoC-Research
C
CVE-2026-42978 Windows Push Notifications (WpnService) Use-After-Free & Race Condition PoC research, diagnostic scanner, and security audit module for AI Security Tool.