Repositories list

• juice-shop-forked

  Public
  OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

  TypeScript

  •

  MIT License

  •19k19k forks•00 stars•00 issues•99 pull requests•Updated Sep 8, 2026Sep 8, 2026

• zeropath-gerrit-jenkins

  Public
  Jenkins Shared Library for CI-triggered ZeroPath Gerrit change scans

  Groovy

  •

  MIT License

  •00 forks•00 stars•00 issues•00 pull requests•Updated Aug 28, 2026Aug 28, 2026

• broker

  Public
  ZeroPath Broker

  Go

  •00 forks•00 stars•00 issues•00 pull requests•Updated Jul 30, 2026Jul 30, 2026

• zeropath-mcp-server

  Public
  Open-source MCP server for querying ZeroPath security issues, patches, and scans using Claude, Cursor, Windsurf, or any AI assistant.

  securityappsecsecurity-automation+ 2

  securityappsecsecurity-automationdevsecopsmcp-server

  Python

  •

  MIT License

  •55 forks•99 stars•11 issue•33 pull requests•Updated Jul 8, 2026Jul 8, 2026

• securitycompass-mcp

  Public
  Python

  •

  MIT License

  •00 forks•11 star•00 issues•00 pull requests•Updated Jul 8, 2026Jul 8, 2026

• zeropath-cli

  Public
  ZeroPath CLI Releases

  securityvulnerabilitiesappsec+ 2

  securityvulnerabilitiesappsecsecurity-toolszeropath

  22 forks•77 stars•00 issues•00 pull requests•Updated Jun 29, 2026Jun 29, 2026

• OpenErrata

  Public
  Crowdsourced, inline LLM investigations of the things you're reading.

  TypeScript

  •

  GNU Affero General Public License v3.0

  •11 fork•4545 stars•11 issue•00 pull requests•Updated Jun 14, 2026Jun 14, 2026

• agent_install

  Public
  Shell

  •00 forks•00 stars•00 issues•00 pull requests•Updated Jun 13, 2026Jun 13, 2026

• credit-estimate

  Public
  Estimate the price of scanning repositories using Zeropath

  Python

  •00 forks•00 stars•00 issues•00 pull requests•Updated May 29, 2026May 29, 2026

• autogpt-CVE-2026-30950-poc

  Public
  POC for CVE-2026-30950 which allows session hijacking in AutoGpt

  Python

  •00 forks•00 stars•00 issues•00 pull requests•Updated May 20, 2026May 20, 2026

• zeropath-agent-plugin

  Public
  ZeroPath plugin for AI code agents — bring AppSec scanning (SAST, secrets, SCA, IaC), finding triage, and security context into Claude Code from chat.

  securitymcpdeveloper-tools+ 12

  securitymcpdeveloper-toolsappsecscacode-scanningvulnerability-scannersastai-securityiac-security+ 5

  JavaScript

  •

  MIT License

  •00 forks•00 stars•00 issues•00 pull requests•Updated May 20, 2026May 20, 2026

• juice-shop

  Public
  OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

  TypeScript

  •

  MIT License

  •19k19k forks•00 stars•00 issues•00 pull requests•Updated May 19, 2026May 19, 2026

• opus-benchmark

  Public
  Code for our opus 4.6 vulnerability detection benchmark

  Python

  •22 forks•1919 stars•00 issues•00 pull requests•Updated May 11, 2026May 11, 2026

• nifi-CVE-2026-39816-poc

  Public
  POC for CVE-2026-39816 which allows NiFi users without execute code permissions to run arbitrary scripts

  Python

  •11 fork•11 star•00 issues•00 pull requests•Updated May 8, 2026May 8, 2026

• proftpd-CVE-2026-42167-poc

  Public
  POCs to demonstrate CVE-2026-42167 in ProFTPD

  Python

  •66 forks•2424 stars•00 issues•00 pull requests•Updated Apr 29, 2026Apr 29, 2026

• symphony

  Public
  Symphony turns project work into isolated, autonomous implementation runs, allowing teams to manage work instead of supervising coding agents.

  Elixir

  •

  Apache License 2.0

  •2.8k2.8k forks•00 stars•00 issues•00 pull requests•Updated Apr 27, 2026Apr 27, 2026

• spinnaker-poc

  Public
  POCs for CVE-2026-32604 and CVE-2026-32613 which allow post-auth RCE and credential theft in Spinnaker

  Python

  •00 forks•00 stars•00 issues•00 pull requests•Updated Apr 21, 2026Apr 21, 2026

• scademorepo

  Public
  Python

  •11 fork•00 stars•00 issues•00 pull requests•Updated Apr 9, 2026Apr 9, 2026

• ragflow-poc

  Public
  POC for Unpatched Post-Auth RCE in Ragflow 0.24.0

  Python

  •00 forks•00 stars•00 issues•00 pull requests•Updated Apr 9, 2026Apr 9, 2026

• payroll-demo-2

  Public
  Python

  •77 forks•00 stars•00 issues•22 pull requests•Updated Apr 4, 2026Apr 4, 2026

• secDevLabs

  Public
  A laboratory for learning secure web and mobile development in a practical manner.

  PHP

  •

  BSD 3-Clause "New" or "Revised" License

  •459459 forks•00 stars•00 issues•1111 pull requests•Updated Mar 29, 2026Mar 29, 2026

• Piwigo-PR-scan-clone

  Public
  Manage your photos with Piwigo, a full featured open source photo gallery application for the web. Star us on Github! More than 200 plugins and themes available…

  PHP

  •

  GNU General Public License v2.0

  •481481 forks•00 stars•00 issues•22 pull requests•Updated Mar 23, 2026Mar 23, 2026

• public-pocs

  Public
  Public POCs, primarily for ZeroPath-discovered vulnerabilities

  Python

  •

  MIT License

  •00 forks•11 star•00 issues•00 pull requests•Updated Mar 18, 2026Mar 18, 2026

• validation-benchmarks

  Public
  XBOW Validation Benchmarks -- Forked by ZeroPath

  PHP

  •

  Apache License 2.0

  •215215 forks•1313 stars•00 issues•11 pull request•Updated Mar 16, 2026Mar 16, 2026

• damn-vulnerable-nginx-hard

  Public
  Nginx with some special extra functionality

  C

  •

  BSD 2-Clause "Simplified" License

  •00 forks•00 stars•00 issues•00 pull requests•Updated Mar 16, 2026Mar 16, 2026

• zeropath-ctf

  Public
  Learn to build exploits against real world CVEs

  C

  •

  Apache License 2.0

  •22 forks•3636 stars•00 issues•00 pull requests•Updated Mar 3, 2026Mar 3, 2026

• demorepo-dev

  Public
  Python

  •1414 forks•00 stars•00 issues•55 pull requests•Updated Feb 20, 2026Feb 20, 2026

• InvenTree

  Public
  Open Source Inventory Management System

  Python

  •

  MIT License

  •1.5k1.5k forks•00 stars•00 issues•22 pull requests•Updated Feb 12, 2026Feb 12, 2026

• clawdbot-stealer-poc

  Public
  POC: Malicious website for stealing session tokens by abusing clawdbot

  HTML

  •

  MIT License

  •22 forks•44 stars•00 issues•00 pull requests•Updated Feb 2, 2026Feb 2, 2026

• demorepo1-php

  Public
  PHP

  •11 fork•00 stars•00 issues•55 pull requests•Updated Feb 2, 2026Feb 2, 2026