a public repository, read by nittim
bikini/exploitarium security audit
What nittim read in this repository, and what it found. Public repository, public reading — sourced from its own code and dependency manifests, nothing else.
A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed…
Python · 5.2k stars · last push September 16, 2026
bikini/exploitarium is a Python repository that archives public exploit proofs of concept and vulnerability research writeups. The repository serves as a collection of security research materials intended to educate and attract people to the field of cybersecurity.
nittim scanned 178 of 179 files in the repository and found evidence of committed credentials on production paths. The scan identified 2 findings of this kind. No vulnerable runtime dependencies or vulnerable packages were detected.
After addressing the committed credentials, the repository maintainer should rescan bikini/exploitarium to confirm the issues have been resolved. Running a dedicated audit for credential detection will help identify the specific locations and types of secrets that need to be removed or rotated.
Written from nittim's own scan on October 26, 2026; rescanned when the repository changes.
No verdict. The rule-based check reports hard evidence, or reports that it found none. Neither is a judgment on whether this code is safe to ship.
What was read — rule-based scan
Rule-based checks run on nittim's servers — a secret scanner and a dependency check, no model in the path. The code reached those two and stopped there.
Read 178 of 179 eligible files. Commit 28d463a. 2026-10-26.
What the scanners found
- Committed secrets on production paths
- 2
- Vulnerable runtime dependencies
- 0
Run it yourself
Scan any public repository in seconds — no sign-in, no card. Audit it to have a model read the code. Loop the report into your assistant to get the fixes applied and re-checked.
Scan your own repoQuestions
- What did nittim read in bikini/exploitarium?
- nittim read 178 of 179 eligible files in bikini/exploitarium. The reading ran on October 26, 2026. It was taken at commit 28d463a.
- Did nittim find committed secrets or vulnerable dependencies in bikini/exploitarium?
- The rule-based scan found 2 committed secrets and 0 vulnerable dependencies in bikini/exploitarium. No vulnerable dependency was found by the rule-based scan.
- Is bikini/exploitarium production ready?
- A free scan is not a verdict. A full audit gives one.
More like this
Add the badge to your README
[](https://nittim.com/library/bikini/exploitarium)