Login
Heisenberg Dependency Health Check – GitHub Action for Supply Chain Risk
Heisenberg Dependency Health Check is a GitHub Action that flags risky or newly introduced dependencies in pull requests using supply-chain signals.
Reading view
mcp-scan – Real-Time Guardrail Monitoring and Dynamic Proxy for MCP Servers
mcp-scan is a dynamic proxy and guardrail monitor for MCP servers, providing real-time traffic inspection and enforcement for agents and tools.
gitlab-runner-research – PoC for abusing self-hosted GitLab runners
gitlab-runner-research: PoC scripts demonstrating abuse of self-hosted GitLab runners and practical hardening and detection guidance.
mcp-scanner – Python MCP Scanner for Prompt-Injection and Insecure Agents
mcp-scanner: Python tool to scan Model Context Protocol servers for prompt injection, jailbreaks, and insecure tool patterns.
NetExec – Network Execution Toolkit for Windows and Active Directory
NetExec provides multi-protocol network execution for Windows Active Directory environments. Install, run and use nxc for lateral movement, enumeration and command execution.
XRayC2 – Weaponizing AWS X-Ray for Covert Command and Control (C2)
XRayC2 shows how AWS X-Ray can be abused as a covert command and control channel. Practical walkthrough, install, attack scenario, detections.
HoneyBee – Misconfigured App Generator for Red Team Validation
HoneyBee generates intentionally misconfigured Docker environments and Nuclei templates using LLMs so red teams can rehearse exploitation and validate detection.
Autoswagger – Automated discovery and testing of OpenAPI & Swagger endpoints
Autoswagger finds and tests OpenAPI/Swagger specs to expose unauthenticated endpoints, PII leaks and secrets. Tooling, installation and an attack scenario included.
CloudConqueror – AWS CloudControl API Attack Surface Mapping and Persistence Tool
CloudConqueror maps and abuses the AWS CloudControl API for discovery, resource enumeration, and persistence. Learn how attackers and defenders can test detection coverage and harden cloud environments.
IAMhounddog – Practical AWS IAM Relationship Mapping for Red Teams
IAMhounddog maps AWS IAM relationships to reveal privilege escalation chains. Hands-on walk-through, graph export and detection guidance for red teams.
AIPentestKit – AI-Augmented Red Team Toolkit for Recon, Fuzzing and Payload Generation
AIPentestKit bundles AI helpers for red teams: Burp plugins, payload and wordlist generators, webshell bypass tools and a tasklist analyzer driven by large language models.
SetupHijack – Installer and Updater Race Condition Proof of Concept for Local Escalation
SetupHijack is a Windows research tool that races installer and updater drop locations to substitute attacker payloads and achieve elevated execution.
LLAMATOR – Red Team Framework for Testing LLM Security
LLAMATOR is a Python framework for red teaming large language model systems with preset attacks, multi-client adapters, and reportable results.
TagNabIt – AWS Cloud Resource Enumeration via Metadata Tags
TagNabIt is an offensive security tool for enumerating cloud resources through metadata tags, exposing overlooked attack surfaces in modern environments.
AzureStrike – Offensive Toolkit for Attacking Azure Active Directory Environments
AzureStrike is a red team toolkit for attacking Azure Active Directory, enabling reconnaissance, credential abuse, and persistence in cloud environments.
Veles – Google’s Open Source Secret Scanner for GCP Key Detection
Google releases Veles, a lightweight open-source secret scanner for GCP credentials, now integrated with OSV-SCALIBR and deps.dev.
