MITRE

NVD is a CVE research database available through the National Institute of Standards and Technology's NVD website.

Mobile Verification Toolkit (MVT) is a command-line collection of forensic utilities developed and maintained by Amnesty International's Security Lab and other contributors. It analyzes forensic acquisitions from Android and iOS devices to identify traces that may indicate compromise, including scans against public indicators of compromise from Amnesty International and other research groups. Its platform commands are `mvt-ios` and `mvt-android`; the `mvt` command provides shared functions such as version reporting, shell completion, plugin management, and downloading indicators. MVT can be installed from source or PyPI and is intended for trained technologists and investigators rather than end-user self-assessment. Public indicators alone cannot establish that a device is clean, and the project is distributed under its own license.

Sysdig is a cloud-security platform that provides real-time visibility from runtime through development. It is described in the video context as a customer-side CVE-scanning tool that produces security reports; its website also presents capabilities for assessing cloud risk, prioritizing critical risks, detecting threats, and responding to them.

Codex Security is an OpenAI CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in authorized code repositories. It scans directories and codebases, including repository changes, uses AI-assisted analysis to trace attack paths and apply custom threat models, validates findings, and can generate reviewable patches and exports in SARIF, JSON, and CSV formats. The CLI supports CI use with an API key and can stop builds at a selected severity threshold. The package also supports configurable deep scans, worker and subagent counts, time limits, containerized bulk scans, and a preview findings service. The service stores findings and embeddings in SQLite, provides paginated listings and a read-only dashboard, identifies potential duplicates through embedding similarity, and allows completed findings to be published and deduplicated through the CLI or SDK. It requires Node.js 22.13.0 or later and Python 3.10 or later, and can use OpenAI or other documented inference providers.

claude-red is a curated library of offensive-security skills for Claude, maintained by SnailSploit. Each skill is a structured SKILL.md file covering a particular attack surface, including web vulnerabilities, identity systems, wireless, cloud, mobile, IoT, exploit development, fuzzing, reconnaissance, API security, containers, cryptography, privilege escalation, post-exploitation, and AI security. The files are intended to be installed into a Claude Skills environment, where matching skills load on demand from conversational triggers, or they can be supplied manually as system files or project prompts. The repository includes an installation script with category and target options, a skill index, a roadmap, contribution guidance, and a review-oriented skill template. It is distributed under the MIT license and lists authorized red-team engagements, bug-bounty triage, security research, CTF preparation, and operator training as use cases.