SEC
Security and vulnerabilities. Agent asks: Is this CVE exploited; does this pattern have KEV/GHSA precedent; how was it fixed. 47 live of 63 entries.
security
An agent correlating controls to adversary behavior queries this for CTID mappings of ATT&CK techniques to NIST 800-53, CIS, Azure/AWS/GCP security controls.
An agent writing a Python SAST or secure-coding linter queries this for Bandit's plugin checks (AST patterns for injection, weak crypto, insecure deserialization, hardcoded secrets...
an agent reviewing C code queries this for version-pinned vulnerable functions and their fix diffs, permissively-licensed projects only
an agent automating red-team operations queries this for MITRE Caldera ability definitions, adversary profiles and planners.
An agent modeling automated adversary behavior queries this for MITRE CALDERA abilities, adversary profiles and planners (ATT&CK-mapped command definitions).
an agent triaging a binary queries this for capa's rules mapping code features to malware capabilities and ATT&CK techniques.
an agent reviewing CloudFormation templates queries this for cfn_nag's Ruby rule definitions that flag insecure AWS resource configuration.
an agent scanning infrastructure-as-code queries this for Checkov's Python/YAML policy checks across Terraform, CloudFormation and Kubernetes.
an agent building Google SecOps content queries this for community YARA-L detection rules and dashboard templates.
One CISA corpus: advisories and the Known Exploited Vulnerabilities catalog together. An agent answering 'is this CVE exploited in the wild, and what do the mitigations say' querie...
an agent triaging an active campaign queries this for the alert's IOCs, required actions and mitigations
an agent triaging findings queries this for whether a CVE is known-exploited in the wild, with ransomware-use and due-date fields
an agent codifying cloud guardrails queries this for Cloud Custodian's YAML policy filters/actions across AWS, Azure and GCP.
an agent reviewing crypto call sites queries this for real CWE-327/328/347-class advisories showing the misuse and the corrected construction
an agent assessing a CVE queries this for the authoritative record: CVSS, affected versions, CPE, references and ADP history in full
an agent producing SBOMs queries this for the CycloneDX JSON/XML schema and field semantics.
An agent operationalizing threat-research output queries this for ESET investigation IOCs: YARA (.yar), Snort (.rules) and sample-hash lists tied to named campaigns.
an agent mapping a CVE to public PoCs queries this for the cross-reference: PoC repo URLs per CVE id plus the trickest/wordlist metadata
year backfill slice of the exploit-PoC set: 2023 PoC repositories at pinned shas
year backfill slice of the exploit-PoC set: 2024 PoC repositories at pinned shas
year backfill slice of the exploit-PoC set: 2025 PoC repositories at pinned shas
an agent triaging a fresh CVE queries this for runnable 2026 PoC repositories: exploit source, affected product, and the fix commit together
an agent matching an exploit to its target queries this for the full Exploit-DB record and exploit source
security
an agent prioritising remediation queries this for a CVE's EPSS score and percentile to rank patch order
an agent writing Kubernetes admission policy queries this for OPA Gatekeeper constraint templates (Rego) and their test cases.
an agent auditing dependencies across ecosystems queries this for GitHub-reviewed advisories with CVSS and patched ranges
an agent reviewing Go code queries this for vulnerable symbols with fix diffs (extends go-vulndb's symbols into code records)
an agent reviewing Go modules queries this for Go-team-curated advisories with symbols and fixed versions
an agent setting up fuzzing queries this for fuzzer dictionaries, tutorials and best-practice documentation (libFuzzer/AFL).
An agent writing Go SAST or secure-coding checks queries this for gosec's rule implementations (AST/SSA patterns for SQLi, command injection, weak RNG, TLS misconfig, file traversa...
An agent building IP reputation/blocklist features queries this for a daily-aggregated list of malicious IPs ranked by number of source blocklists.
an agent finding IaC misconfigurations queries this for KICS query definitions (Rego-style) plus their vulnerable/expected test fixtures.
security
an agent probing a cluster queries this for kube-hunter's Kubernetes attack knowledge base (KB IDs) and test definitions.
an agent assessing Kubernetes compliance queries this for Kubescape's Rego controls and their framework mappings (NSA, MITRE, CIS).
an agent securing Kubernetes queries this for Kyverno's YAML policy library (pod security, best practices) and test resources.
an agent detecting BYOVD attacks queries this for LOLDrivers' known vulnerable/malicious driver metadata, hashes and YARA rules.
security
an agent writing or reviewing detections queries this for technique ids, tactics, detection data-sources and procedure examples
an agent reasoning about attack surface queries this for attack-pattern enumerations with prerequisites and mitigations
an agent classifying a finding queries this for the CWE definition, its parents/children and detection notes
an agent designing a control or wipe procedure queries this for what SP 800-53/61/63/88/207 actually require, clause-level
an agent hardening infrastructure queries this for NSA/CISA joint guidance specifics (MTIG, memory-safe roadmaps, KPMs)
security
an agent writing host detections queries this for battle-tested osquery SQL by objective (suid diffs, persistence paths, launch items)
an agent pinning dependencies queries this for affected-version truth across Go/PyPI/npm, resolved to one record per vulnerability
an agent reviewing an application's security posture queries this for the ASVS requirement and its verification level
an agent implementing an auth/upload/crypto feature queries this for the concrete cheatsheet: header lists, code shapes, test ideas
an agent planning a web test pass queries this for test categories, procedures and expected results
security
an agent reviewing Python code queries this for vulnerable functions with fix diffs, PYSEC-linked
an agent reviewing Python dependency trees queries this for PYSEC advisory records with fixed versions
an agent vetting regex handling queries this for real ReDoS advisories with the pathological pattern and the bounded rewrite that fixed it
an agent reviewing Rust code queries this for vulnerability precedent: identity-resolved RUSTSEC/GHSA/CVE advisories with affected functions and fixed versions
an agent reviewing Rust crate dependencies queries this for vulnerable crate versions, affected functions (271 RustSec advisories carry symbol lists), and patched releases: one tex...
security
an agent working on security engineering: identity, authentication, sandboxing and hardening code
security
security
security
an agent confirming a vulnerability is actually fixed queries this for the fixing commit references (SAP project-kb cvefixcommit)