A monitoring hub that watches popular open-source repositories and uses AI to detect when commits are patching security vulnerabilities - often before a CVE is even assigned. Findings are published to a retro-themed website with an RSS feed.
☆161Sep 1, 2026Updated last month
Alternatives and similar repositories for vulnerability-spoiler-alert
Users that are interested in vulnerability-spoiler-alert are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- GitHub Action to alert on security patches before the CVE drops.☆223Updated this week
- MCPwned is a companion extension that enables pentesters to effectively test MCP servers. It recognizes MCP-like endpoints, provies a sca…☆20Sep 28, 2026Updated 3 weeks ago
- Repository for Vulnerability Localization Benchmark☆32Sep 14, 2026Updated last month
- ☆22Jul 16, 2026Updated 3 months ago
- My code and notes for "From Day Zero to Zero Day", a book on vulnerability research by Eugene Lim.☆37Nov 10, 2025Updated 11 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Clear and obvious name of the exploitation technique can create a false sense of familiarity, even if its true potential was never resear…☆123Feb 22, 2026Updated 8 months ago
- Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration test…☆452Oct 12, 2026Updated last week
- Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents,…☆3,932Updated this week
- Convert HTTP requests into API spec☆14Feb 14, 2026Updated 8 months ago
- jxscout superpowers JavaScript analysis for security researchers☆468Apr 12, 2026Updated 6 months ago
- Inline proxy for software package registries to provide observability and policy controls to installs.☆53Sep 22, 2026Updated last month
- Interactsh deployment to AWS EC2 Instance with Terraform☆12Dec 29, 2021Updated 4 years ago
- API security testing framework for REST, GraphQL, and gRPC that validates authorization logic using role-based testing and YAML-driven te…☆77Oct 3, 2026Updated 2 weeks ago
- SAST + LLM Interprocedural Context Extractor☆212Oct 28, 2025Updated 11 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A comprehensive VS Code extension for developing Burp Suite extensions☆14Jul 22, 2025Updated last year
- Adobe Experience Manager (AEM) hacking toolkit☆119Sep 26, 2025Updated last year
- A central place to keep track of relevant BountyMachine talks, blogs, and interesting things!☆35Nov 17, 2018Updated 7 years ago
- Scripts and examples for "From Day Zero to Zero Day" by Eugene Lim.☆277Jun 18, 2026Updated 4 months ago
- GhostCVEs☆22Oct 15, 2026Updated last week
- Abuse trust-boundaries to bypass firewalls and network controls☆433Jul 10, 2026Updated 3 months ago
- Scripts that I've written that others may find useful☆14Aug 17, 2022Updated 4 years ago
- Results from analyzing data gathered from 1.6 billion subdomains☆33Oct 15, 2024Updated 2 years ago
- Filter and enrich a list of subdomains by level☆218Sep 25, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Sandboxed devcontainer for running Claude Code in bypass mode safely. Built for security audits and untrusted code review.☆958Aug 28, 2026Updated last month
- ☆16Jun 23, 2024Updated 2 years ago
- A Firefox Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon☆28Dec 9, 2024Updated last year
- Multithreaded Host Header Redirection Scanner☆14Nov 10, 2020Updated 5 years ago
- PoC for leaking text nodes via CSS injection☆26Jul 27, 2024Updated 2 years ago
- Demos for Black Hat Europe 2025's The Forensic Trail On GitHub: Hunting For Supply Chain Activity☆28Updated this week
- A Python tool for discovering, downloading, and extracting metadata from publicly available files on target domains. Useful for OSINT.☆16Nov 7, 2025Updated 11 months ago
- web app monitoring automation☆15Jan 7, 2025Updated last year
- WINFLESHER v2.0 - ATTACK SURFACE SECURITY FRAMEWORK☆26Sep 21, 2026Updated last month
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Security research writeups☆19Aug 8, 2026Updated 2 months ago
- Bruteforcing from various scanner output - Automatically attempts default creds on found services.☆15Mar 10, 2025Updated last year
- 🐛 A list of writeups from the MSRC (Microsoft) Bug Bounty program☆44Oct 29, 2025Updated 11 months ago
- Useful scripts for tampermonkey that I used during bug hunting. Will be updated "au fil de l'eau"☆18Jun 2, 2025Updated last year
- Classify Git commit diffs and messages with Jev. Bug fixes, security fixes/CWEs, and change types.☆38Sep 17, 2026Updated last month
- Remove duplicate URLs by retaining only the unique combinations of hostname, path, and parameter names☆38May 5, 2024Updated 2 years ago
- A font-based deception tool for red teaming, security research, and whatever else.☆351Aug 9, 2026Updated 2 months ago