An agent that can help triage vulnerabilities across multiple codebases
☆19Mar 14, 2026Updated 5 months ago
Alternatives and similar repositories for vulnvibes
Users that are interested in vulnvibes are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A security system to protect your vibecoded apps☆283Mar 27, 2026Updated 5 months ago
- Self-hosted external attack surface scanner. Subdomain enumeration + takeover detection, ports, CVEs, TLS, SSH, web vulns, EPSS/KEV prior…☆23Updated this week
- ☆11Jan 24, 2023Updated 3 years ago
- A handy plugin for copying requests/responses directly from Burp, some extra magic included.☆13Oct 15, 2021Updated 4 years ago
- GHAST (GitHub Actions Static Analysis Tool) is a tool to analyze the security posture of your GitHub Actions and its surrounding environm…☆20Aug 29, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A Kubernetes operator to manage Zed Attack Proxy (ZAP) scans☆20Mar 6, 2026Updated 5 months ago
- ☆16Sep 4, 2025Updated 11 months ago
- ☆22Apr 10, 2025Updated last year
- Track C2 servers, tools, and botnets over time by framework and location☆16Aug 17, 2025Updated last year
- Reports on the licenses used by a Go package and its dependencies.☆11Jul 24, 2024Updated 2 years ago
- All the code snippets from my Secure Code Review series on youtube (youtube.com/@muqsitbaig)!☆25Jul 28, 2024Updated 2 years ago
- Semgrep Pro Rules to ensure code using LLMs is following best practices☆73Mar 25, 2026Updated 5 months ago
- A creation guide to running a web server on AWS in php☆12Jul 6, 2020Updated 6 years ago
- GitHub action to download and install Xanitizer, and to run a Xanitizer security analysis in a GitHub workflow.☆11Jan 11, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆62Jul 24, 2026Updated last month
- 🛡 The reference playbook for pentesting AI chatbots & LLM-powered apps in one place. Ready-to-use payloads covering the full OWASP LLM T…☆33Jun 18, 2026Updated 2 months ago
- Comprehensive security and best practices guide for using Claude Code safely and effectively☆17Mar 29, 2026Updated 5 months ago
- ☆13Apr 24, 2023Updated 3 years ago
- This repository provides examples of Vulnerable and Mitigated code as per CWE Categorization.☆23May 4, 2024Updated 2 years ago
- Basic w3af scan in Docker. Can be integrated into CI\CD☆10Feb 21, 2020Updated 6 years ago
- Small tool to decode ASP.NET __VIEWSTATE variable when doing webpentests☆16Feb 27, 2021Updated 5 years ago
- OWASP Foundation Web Respository☆11May 22, 2023Updated 3 years ago
- ☆18Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Damn Vulneable macOS Application☆16Feb 19, 2025Updated last year
- Jenkins Security Research or Hacking Jenkins ;)☆12Dec 10, 2024Updated last year
- GitHub Workflows Insights☆47Jun 27, 2026Updated 2 months ago
- Secure SDLC learning project with GitHub Actions, Semgrep, Trivy, Gitleaks, OWASP ZAP, Docker, Kubernetes, and secure authentication☆21Jul 21, 2026Updated last month
- A simple web app to get the latest EPSS data for a CVE ID☆14Dec 14, 2025Updated 8 months ago
- Phone Number Gathering & OSINT Tool. Collects Phone Numbers and Performs OSINT on the Numbers. Only works on Nigerian Numbers at the mome…☆15Aug 25, 2020Updated 6 years ago
- Just a nice little shellcode loader using unconventional methods to avoid using signatured APIs☆23Jul 11, 2025Updated last year
- A specification including, problem statement, use cases, requirements, and architectural constituents for a Transparency Service in suppo…☆14Feb 17, 2023Updated 3 years ago
- VulnReach builds on standard SCA output by adding reachability context - proving through static analysis, taint tracking, and live runtim…☆23Aug 11, 2026Updated 2 weeks ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Google's list of Certificate Transparency logs as a rust crate for use with sct.rs☆14Feb 17, 2023Updated 3 years ago
- The OpenMRS Java module that allows Tomcat to serve a Single-SPA☆11Jun 30, 2026Updated last month
- NeXSS is a modern, self-hosted Blind XSS (Cross-Site Scripting) hunter and callback listener built with Next.js. It helps security resear…☆34Jan 14, 2026Updated 7 months ago
- Bulk hostname lookup using shodan☆14May 23, 2026Updated 3 months ago
- Gordon is status check Github app to enforce and validate about.yaml file specifications in a repository during pull requests to drive co…☆20Feb 4, 2025Updated last year
- Google Maps for AWS IAM☆276Updated this week
- Free open-source information gathering☆14Mar 20, 2023Updated 3 years ago