vcenter-log4j

VMware vCenter log4j workaround Script to workaround VMware vCenter log4j vulnerability CVE-2021-44228, as per the VMware KB article. 2021-12-13 02:09 UTC - Added Secure Token & Identity Management services 2021-12-13 12:46 UTC - Added PSC Client for 6.5 - see below VMware have released a python...

Log4JHunt

Log4JHunt An automated, reliable scanner for the Log4Shell CVE-2021-44228 vulnerability. Video demo: Usage Here the help usage: root@kitploit: $ python3 log4jhunt.py +--------------+ Log4JHunt +--------------+ + Log4jHunt by RedHunt Labs - A Modern Attack Surface ASM Management Company + Author:...

SecuSphere

SecuSphere Your Comprehensive DevSecOps Solution Welcome to SecuSphere, your one-stop solution for all DevSecOps needs. Our centralized platform is expertly designed to manage and optimize your vulnerability management, CI/CD pipeline integration, security assessments, and DevSecOps practices...

kube-alien

Kube-alien This tool launches attack on k8s cluster from within. That means you already need to have an access with permission to deploy pods in a cluster to run it. After running the kube-alien pod it tries to takeover cluster's nodes by adding your public key to node's /root/.ssh/authorizedkeys...

CVE-2023-46604-ActiveMQ-RCE-pseudoshell

CVE-2023-46604 RCE Pseudoshell This script leverages CVE-2023046604 Apache ActiveMQ to generate a pseudo shell. The vulnerability allows for remote code execution due to unsafe deserialization within the OpenWire protocol. Description CVE-2023-46604 is a deserialization vulnerability that exists ...

Nettacker

OWASP Nettacker...

bug-bounty-library

Bug Bounty / Original Findings Library Folders are numbered in the order a hunter actually works - first to last. Start at 00-hunt/00-INDEX. Run the hunt from 00-hunt/ALPHA. This README is only the map. Authorization only. Safe harbor, VDP, GitHub PVR, or coordinated disclosure. No other-customer...

CVE-2023-38408

CVE-2023-38408 PoC for the recent critical vuln affecting OpenSSH versions 9.3p2 Designed to work seamlessly with TryHackMe's free access lab environment covering this vuln. https://tryhackme.com/room/cve202338408 NOTE: This will not work outside the THM Lab environment...

CVE-2015-3636

This repository does not have a README...

nvd

nvd Fast, simple library in Go to fetch CVEs from the NVD U.S. National Vulnerability Database feeds. Install root@kitploit: go get github.com/daehee/nvd Usage The nvd package provides a Client for fetching CVEs from the official NVD feeds: root@kitploit: // nvd client with ./tmp working dir...

0day-Rubbish

0day Rubbish 0day vulnerabilities have become rubbish in the AI era...

Anthropic-Credited-CVEs

ANTHROPIC CVE TRACKER Overview Tracking vulnerabilities that credit the Anthropic research team and are possibly discovered by Project Glasswing. CURRENT CVE COUNT: 149 Initial Research Tracking CVEs Attributed to Anthropic Researchers and Project Glasswing Add a Vulnerability If you find an...

Awesome-LLMs-for-Vulnerability-Detection

Awesome Large Language Models for Vulnerability Detection A curated list of papers, projects, and agent skills on using LLMs for vulnerability detection and discovery. 📄 Papers Only showing 2025 and later. For earlier work, see Papers Archive 2024 and earlier...

ship-safe

Find risky code, AI-agent vulnerabilities, and supply-chain issues before they ship. Website · Docs · Security & Data Flow · Benchmark · Pricing · Blog · Contribute...

missing-cve-nuclei-templates

Weekly updated list of missing CVEs in nuclei templates official repository Note This repository is 100% automated so there can be errors, but in general is pretty accurate. Go to section "How it works" to understand how data is collected. Stats 📊 CVEs analyzed : 167758 CVEs missing : 66838...

awesome-list

Awesome Cybersecurity List My personal collection of awesome blog posts, write-ups, and papers focusing on cybersecurity. For a deeper dive into cybersecurity-related tools, check out the dedicated Cybersecurity Tools list. Outline 2026 2025 2024 2023 2022 2021 2020 2019 2018 2017 2016 2014 2011...

CVE-2026-16723

CVE-2026-16723 Exploit A standalone C++17 implementation for CVE-2026-16723 , a critical vulnerability affecting Fastjson versions 1.2.68 – 1.2.83. Requirements Linux or WSL on Windows C++17 compatible compiler GCC 7+ or Clang 5+ CMake 3.10 or newer System packages: libzip-dev zlib1g-dev Debian /...

HIKRAVEN

HIKRAVEN 🛡️ Advanced Hikvision Security Assessment Platform - Professional Edition Features • Quick Start • Installation • Usage • Documentation • Disclaimer ⚠️ IMPORTANT LEGAL NOTICE ! THIS TOOL IS FOR AUTHORIZED SECURITY TESTING ONLY ! Unauthorized access to computer systems is illegal and...

cve-2025-9951-ffmpeg-jp2-poc

CVE-2025-9951 FFmpeg JPEG 2000 Exploitation Research This repository contains two deliberately separated exploitation milestones for the FFmpeg JPEG 2000 component-mapping vulnerability: 1. 01-gdb-assisted/ — the original deterministic GDB-launched PoC and its full research-journey writeup,...

radare2

Radare2: Libre Reversing Framework for Unix Geeks Current git master branch is 6.2.0, next release will be 6.2.1. Description r2 is a complete rewrite of radare. It provides a set of libraries, tools and plugins to ease reverse engineering tasks. Distributed under LGPLv3, despite each plugin can...