Open-source —
What we ship, for free.
Public repos from the SL7 lab. Auditors, exploit chains, scanners, and primitives we wanted ourselves. MIT-licensed where applicable. Fork, file issues, send PRs.
Repositories
Eight tools, still in the open.
Star counts and forks from github.com/securelayer7. Click through for source, README, and issues.
sandyaa — autonomous code auditor that keeps digging until it finds and proves real bugs
OPEN ON GITHUB →
CVE-2024-38856_Scanner — Apache OFBiz pre-auth RCE scanner
OPEN ON GITHUB →
PinNinja — identify UART RX/TX/GND pins on unknown hardware
OPEN ON GITHUB →
pwnfb50 — FB50 smart-lock takeover (CVE-2019-13143) exploit + write-up
OPEN ON GITHUB →
PROMPTPurify — prompt-injection guardrail for LLM-backed apps
OPEN ON GITHUB →
CVE research
Twenty disclosures catalogued in NVD.
Every CVE SecureLayer7 has disclosed, with the year, vendor, and write-up link. Maintained at Security advisories.
Contribute
Found a bug, or want to extend one of these?
File an issue on GitHub. We triage weekly. For security-sensitive reports, mail info@securelayer7.net first, not the public tracker.