vulnrepro-benchmark

VulnRepro A benchmark that checks if an AI model can actually review vulnerable code, or if it just sounds confident. Most security benchmarks ask one question: can the model find the bug? That is only half the job. The other half, the part that actually wears you down in real review work, is not...

shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...

CVE-2024-3094-XZ-Utils-Check

JB-Network - check-xz.sh Utility to check if you have a vulnerable version according to CVE-2024-3094. Installation To use it, open your terminal and run: cd;mkdir git;git clone https://github.com/jbnetwork-git/linux-tools.git chmod +x /git/check-xz.sh How to run? cd /git ./check-xz.sh License. M...

CVE-2024-23772

CVE-2024-23772 - Arbitrary File Create Vulnerability Information will follow in due course...

poc-CVE-2024-10220

poc-CVE-2024-10220 CVE-2024-10220 POC...

FireStorePwn

FireStorePwn fsp Firestore Database Vulnerability Scanner Using APKs fsp scans an APK and checks the Firestore database for rules that are not secure, testing with or without authentication. If there are problems with the security rules, attackers could steal, modify or delete data and raise the...

CVE-2020-7799

cve-2020-7799 Batch detection of cve-2020-7799 Add a text.txt file in the same directory The URL format in the file is as follows: www.baidu.com 132.231.132.132 133.12.122.13:8080 Run with python3 cve-2020-7799.py Note: It is prohibited to use all resources of this project for illegal testing!...

CVE-2023-51385

CVE-2023-51385...

Mikrotik-router-hack

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. The vulnerability has long since been fixed, so this project has ended and will not be supported or updated anymore. You can fork it and updat...

DeepZero

Automated vulnerability research pipeline engine Define pipelines as YAML. DeepZero handles orchestration, parallelism, fault tolerance, and state. English | 简体中文 | Français 🔗 Pipeline-as-YAML - chain ingest, filter, transform, and LLM-assess stages declaratively ⚡ Parallel execution -...

seccubus

About Seccubus Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. On repeated scan delta reporting ensures that findings only need to be judged when they first appear in the...

vuls

Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen Abstract For a system administrator, having to perform security vulnerability analysis and software update on a daily basis can be a burden. To avoid downtime in a production...

CVE-2021-43798

CVE-2021-43798...

PoCs-CVE_2012_4681

PoCs-CVE20124681 A Simple PoC for CVE-2012-4681...

cve-2024-22017_to_test

cve-2024-22017totest...

cve-2018-15473

CVE-2018-15473 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-15473 Image author: https://github.com/cved-sources/cve-2018-15473...

shellshocker-python

shellshocker-python This is a Python Application that helps you detect if your machine that run Bash is vulnerable by CVE-2014-6271...

pip-audit

pip-audit pip-audit is a tool for scanning Python environments for packages with known vulnerabilities. It uses the Python Packaging Advisory Database https://github.com/pypa/advisory-database via the PyPI JSON API as a source of vulnerability reports. This project is maintained in part by Trail ...

STEWS

STEWS: Security Testing and Enumeration of WebSockets STEWS is a tool suite for security testing of WebSockets This research was first presented at OWASP Global AppSec US 2021 Features STEWS provides the ability to: Discover : find WebSockets endpoints on the web by testing a list of domains...

spring-amqp-deserialization

spring-amqp-deserialization A Proof of Concept of Spring AMQP Deserialization Vulnerability CVE-2023-34050 Affected versions: 1.0.0 to 2.4.16 3.0.0 to 3.0.9 Reference: https://spring.io/security/cve-2023-34050...