2965276 matches found
Vulners Software Audit
Query the Vulners Software Audit API for known vulnerabilities matching one or more software products/versions CPE string or vendor:product:version. Bring-your-own-key BYOK: set apikey, plugin config, or VULNERSAPIKEY. Prefer plugin run vulners … as the hub; this scanner is a thin wrapper...
awesome-hacker-search-engines
Awesome Hacker Search Engines A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more General • Servers • Vulnerabilities • Exploits • Attack surface • Code • Email addresses • Domains • URLs • DNS •...
apkvuln
ApkVuln \ / \ / \ / \ / \ /\ \ \ \ /|\ \ \ | | | \ | |/ /\ \ / / | | | | | | | / \ | / ' \ V /| || | || . | // \|| |\ / /|||| With ApkVuln you will obtain the .java files of an APK and they will be analyzed in search of possible vulnerabilities in the code, for it will make use of regular...
CVE-2024-24919
Check Point Security Gateway RCE Exploit Tool CVE-2024-24919 Overview This repository contains a tool for exploiting the CVE-2024-24919 vulnerability in Check Point Security Gateways. The tool is a multi-scanner that can identify vulnerable devices and a single-target exploit that can take full...
xsscrapy
xsscrapy Fast, thorough, XSS/SQLi spider. Give it a URL and it'll test every link it finds for cross-site scripting and some SQL injection vulnerabilities. See FAQ for more details about SQLi detection. From within the main folder run: ./xsscrapy.py -u http://example.com If you wish to login then...
log4shell
log4j CVE-2021-44228 Lame useless repo to look into log4j CVE-2021-44228. Setup The repository contains a .idea/ folder which is a IntelliJ IDEA project file. The IDE can be used to easily run and debug the log4j functionality. Videos Part 1: https://www.youtube.com/watch?v=w2F67LbEtnk Part 2:...
semgrep-rules
Trail of Bits public Semgrep rules This repository contains Semgrep rules developed by Trail of Bits and made available to the public. They are part of our ongoing development efforts and are used in our security audits, vulnerability reseach, and internal projects. They will evolve over time as ...
Log4j-Windows-Scanner
Log4j-Windows-Scanner CVE-2021-44228 vulnerability in Apache Log4j library | Log4j vulnerability scanner on Windows machines. How does it work It detects the vulnerable versions of log4j by following the folders in the C Directory. When it exposes vulnerable files, it reveals ".TXT" files as...
VivisectION
VivisectION Emulation-Driven Reversing Toolset VivisectION is the cross-section of GUI Reversing, Emulation and Debugging, with an emphasis on using Emulation and other powerful Vivisect toys to aid in Reverse Engineering and Vulnerability Research. Among other things, VivisectION aka Ion is a...
Broker_ApacheMQ
BrokerApacheMQ CVE-2023-46604 - ApacheMQ Version 5.15.5 Vulnerability Machine: Broker...
PatchaPalooza
PatchaPalooza patchapalooza.com — the interactive version is live! This CLI tool has been superseded by patchapalooza.com , a full interactive website for exploring and analyzing Microsoft Patch Tuesday data. It covers everything this tool does — and much more. Head there for the best experience...
CVE-2024-27956
CVE-2024-27956 CVE-2024-27956...
csp-log4j
csp-log4j Finds CSP report urls and tests to see if they are vulnerable to log4j Install go install github.com/randomrobbiebf/csp-log4j/ Run csp-log4j -input file.txt -collab something.oastify.com...
ZTE-Vuln-4-Skids
This repository does not have a README...
CVE-2017-5638
CVE-2017-5638 CVE-2017-5638 PoC Exploits...
spring4shell_victim
spring4shellvictim Intentionally vulnerable Spring app to test CVE-2022-22965 For more information: https://www.fracturelabs.com/posts/effective-spring4shell-scanning-exploitation/ Usage Build The following code will quickly build a vulnerable Docker image using the following components: JDK...
vulnerability-write-ups
This repository does not have a README...
xpfarm
XPFarm An open-source AI-augmented offensive security platform that wraps well-known security tools behind a unified web UI — with distributed scanning, AI-generated reports, a smart scan planner, an interactive attack graph, and a community Plugin SDK. Also check out ObsidianBox Modern on Google...