boost-rnd Goto Github PK

actionscacheblasting

Proof-of-concept code for research into GitHub Actions Cache poisoning.

actionstoctou

Example repository for GitHub Actions Time of Check to Time of Use (TOCTOU vulnerabilities)

agentic_security

Agentic LLM Vulnerability Scanner

bullfrog

Github Action for securing your Github workflows using egress policies

cci-pinata

container-breakouts

Testing/collecting some container breakouts

flowanalyzer

FlowAnalyzer is a tool to help in testing and analyzing OAuth 2.0 Flows, including OpenID Connect (OIDC).

frizbee

Throw a tag at and it comes back with a checksum.

gato-x

GitHub Attack Toolkit - Extreme Edition

gh-hijack-runner

A python script to create a fake GitHub runner and hijack pipeline jobs to leak CI/CD secrets.

gitoops

all paths lead to clouds

malicious-packages

A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.

modelscan

Protection against Model Serialization Attacks

mtkpi

🧰 Multi Tool Kubernetes Pentest Image

nodejs-goof

Super vulnerable todo list application

orgs-data

Mapping from bug bounty and vulnerability disclosure programs to respective GitHub organizations

poutine-rules

Experimental Poutine rules

public-pinata

pwnhub

How GitHub Actions workflows can be hacked

reusable-workflows

roar

runner

The Runner for GitHub Actions :rocket:

runner.server

An unofficial Local GitHub Actions and Azure Pipelines Emulator

sec-eng-notes

vale

:pencil: A markup-aware linter for prose built with speed and extensibility in mind.