Pinned Loading

1. authzlab-api-security-lab authzlab-api-security-lab Public

   Hands-on multi-tenant API authorization lab: reproduce BOLA, BFLA, mass-assignment, and self-approval flaws; compare vulnerable and secure FastAPI apps; explore regression-tested fixes. Uses Docker…

   Python

2. gaphound gaphound Public

   ATT&CK Detection Coverage Gap Analyzer — find blind spots in your Sigma detection rules

   Python

3. rag-eu-ai-act rag-eu-ai-act Public

   Private local RAG over the EU AI Act (EN): Ollama + Qdrant + LlamaIndex + Streamlit, fully offline. MiniCPM5-2B default, CPU and NVIDIA-GPU compose setups, cited answers with a refusal guardrail.

   Python

4. trivy-blind-spots trivy-blind-spots Public

   How much does Trivy really see? A hands-on lab measuring repo-scanning coverage for C#, Python, Node/TS, Docker, Kubernetes and Terraform, uncovering silent blind spots and closing them with custom…

   PowerShell

5. trivy-filesystem-scan-poc trivy-filesystem-scan-poc Public

   Trivy Filesystem Scanning — Security PoC

   Shell

6. unified-vuln-management-poc unified-vuln-management-poc Public

   Proof-of-concept aggregating 5 security scanners (Semgrep, Trivy, npq, ZAP) into DefectDojo via SARIF/XML. One-command setup via WSL/Docker.

   Shell