Open Source

Security tooling and vulnerable-by-design labs, pulled live from GitHub.

react-native-restart ★ 987 ⭳ 757k/mo

React Native Package With One Purpose: To Restart Your React Native Project

JavaScript #android#bundle#ios
caponeme ★ 244

Repository demonstrating the Capital One breach on your AWS account

Python
react-native-user-avatar ★ 201 ⭳ 8.1k/mo

Avatar Component For React Native

TypeScript
cdk-goat ★ 48

Vulnerable by Design AWS Cloud Development Kit (CDK) Infrastructure

Python #aws#cdk#security
cf-signer ★ 15

Tool for signing and verifying the integrity of CloudFormation templates

Python #aws#cloudformation#integrity
cdk-bucket-takeover-scanner ★ 7

A tool that scans a list of AWS accounts for CDK S3 Bucket Takeover Risk

Python
cloud-custodian-example ★ 6

Python
rag-search-homeassistant ★ 6

Home Assistant component for querying events history for entities with LLM

Python #home-assistant#llm#openai
secure_ec2 ★ 5

CLI tool that helps you to provision EC2 instances securely

Python #aws#cloud-security#ec2
cdk-private-api-domain ★ 1

A CDK construct library that provisions a private Amazon API Gateway with a custom domain name, accessible only through VPC endpoints. It simplifies the creation of internal APIs by combining API Gateway, Route 53, and certificate management into a reusable construct.

TypeScript
attestarc-skill ★ 0

Installable Agent Skill that turns your coding agent (Claude Code, Cursor) into a software supply-chain security engineer for your repo and CI/CD — evidence-based findings, safe verified remediation, no scanner service.

Python #agent-skill#appsec#ci-cd-security
dvah ★ 0

DVAH — Damn Vulnerable Agent Harness: a patch-the-runtime security lab for AI-agent platforms. Exploit a real architectural bug, trace it, patch the harness, and prove the security invariant holds.

Python #agent-security#ai-agents#appsec
← Back home