ghascan is a GitHub Actions dorker that finds and analyzes expression injection vulnerabilities in CI/CD workflows at scale. It scans repos and entire orgs, classifies by severity, eliminates false positives, and generates reports with ready-to-use PoCs.
☆19Jul 20, 2026Updated this week
Alternatives and similar repositories for ghascan
Users that are interested in ghascan are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Bienvenido a APITHON, un proyecto de investigación desarrollado para explorar la interoperabilidad de protocolos entre interfaces de usua…☆22Feb 8, 2026Updated 5 months ago
- Simulador de cibersegurança gamificado escrito em Python. Possui sistema de arquivos virtual, ferramentas de rede simuladas (Nmap, Hydra)…☆16Jun 22, 2026Updated 3 weeks ago
- ☆12Feb 18, 2022Updated 4 years ago
- Wounty is a simple web enumeration script that makes use of other popular tools to automate the early stages of recognition in Bug Bounty…☆14Feb 6, 2022Updated 4 years ago
- Web Application Firewall (WAF) Enhanced with AI through Autonomous Dynamic Learning and Generative Models☆17Feb 25, 2026Updated 4 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Web Security Checklist (Bug Bounty & Pentesting)☆175Jun 15, 2025Updated last year
- SNMP Bash Script to discover valid community strings, dump basic information, check for write permission and check for RCE.☆11Apr 27, 2024Updated 2 years ago
- JSpider is a smart crawler for hidden endpoints. It crawls and extracts hidden API endpoints and URLs from JavaScript files and HTML sour…☆17Jun 5, 2026Updated last month
- H&E- Burp Highlighter and Extractor☆18Mar 29, 2023Updated 3 years ago
- ☆13Jun 15, 2023Updated 3 years ago
- A static analysis tool to detect potential backdoors hidden in Ethereum smart contracts.☆15Apr 13, 2026Updated 3 months ago
- Just simple log4j scanner☆12Dec 13, 2021Updated 4 years ago
- Bcheck scripts for Burp☆31Aug 7, 2024Updated last year
- SQLMap Inject Suite Pro☆24Nov 2, 2025Updated 8 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Material e instructivo para el Workshop de nerdearla 101 v2☆13Jul 27, 2022Updated 3 years ago
- A bash tool used to install famous bug bounty tools. Mainly used when setting up a fresh environment.☆16Mar 20, 2023Updated 3 years ago
- Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file which allows an unauthenticated user to execute arbitrary cod…☆16Oct 9, 2021Updated 4 years ago
- A Python tool to scan JavaScript files for sensitive information exposure, helping security researchers identify potential leaks of API k…☆17Feb 17, 2026Updated 5 months ago
- All the practice projects from the book 'Automate the Boring Stuff with Python' 2e.☆16Jan 7, 2021Updated 5 years ago
- Repositorio del taller "Intro a testing y seguridad de smart contracts con Foundry" dictado el 30 de Marzo del 2023 para HackIT/BA>.☆12Mar 30, 2023Updated 3 years ago
- Scripts for Analysis of a RCE in Moodle Calculated Questions (CVE-2024-43425)☆19Aug 23, 2024Updated last year
- Preparation of Attack & Defense CTF for iHack 2022☆16Nov 28, 2023Updated 2 years ago
- Live runtime audit for installed Android apps. Runs on the rooted phone, serves a browser dashboard.☆28May 23, 2026Updated last month
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Open Source Vulnerability Disclosure Program☆24Oct 29, 2021Updated 4 years ago
- Soothing pastel theme for Blink Shell☆22May 14, 2024Updated 2 years ago
- A collection of Python resources for Blue Team security work☆17Sep 23, 2018Updated 7 years ago
- ☆15Dec 6, 2023Updated 2 years ago
- Repository containing a set of policies for aws resources created with terraform☆11Sep 16, 2019Updated 6 years ago
- OSINT Profile Search and Analyzer tool☆26Jan 21, 2026Updated 6 months ago
- ☆13Jun 5, 2022Updated 4 years ago
- Modern Bypass 403☆30Apr 28, 2026Updated 2 months ago
- Your favourite chest/terminal bursting buddy!☆18Nov 27, 2021Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Python for Defenders Course Resources☆21Mar 12, 2026Updated 4 months ago
- Scripted Local Linux Enumeration & Privilege Escalation Checks☆19Mar 26, 2019Updated 7 years ago
- A vSphere deployment of GOADv2 BETA Testing (v0.1)☆26Dec 22, 2023Updated 2 years ago
- Webshell agent in aspx and php☆28Dec 11, 2025Updated 7 months ago
- My talks...☆25Feb 27, 2025Updated last year
- 🎉 CVE Monitor v1.0☆27Jun 30, 2025Updated last year
- A command-line tool and Kubernetes controller to sync EKS clusters into ArgoCD cluster secrets☆13Feb 22, 2021Updated 5 years ago