vulnx

VulnX Vulnx 🕷️ is An Intelligent Bot Auto Shell Injector that detects vulnerabilities in multiple types of Cms...

CVE-2007-3830

CVE-2007-3830 IBM Proventia Sensor Appliance - Multiple Input Validation Vulnerabilities Exploit-db publication at https://www.exploit-db.com/exploits/30290/ Exploit-db paper at : https://www.exploit-db.com/docs/english/13081-having-fun-with-proventia-gx5108-&-gx5008-insecurities.pdf Git repo at...

CVE-2018-7211-PoC

CVE-2018-7211-PoC The PoC||GTFO of CVE-2018-7211 Reference: https://membership.backbox.org/idashboards-9-6b-multiple-vulnerabilities/ Requirements None, only Python Usage Run the script root@kitploit: $ git clone https://github.com/bowline90/CVE-2018-7211-PoC.git $ cd CVE-2018-7211-PoC $ chmod +x...

rxerium-templates

제로데이 및 실제 환경에서 활발히 악용되는 취약점 에 중점을 둔 144개 이상의 Nuclei 템플릿 선별 컬렉션으로, 몇 가지 기타 템플릿도 포함합니다. 템플릿은 수동 탐지 기법버전/날짜 매칭을 사용하며 연도별로 정리되어 있어 쉽게 탐색할 수 있습니다. ⚠️ 참고: 날짜 매칭은 버전 탐지보다 신뢰도가 낮을 수 있습니다. 주의해서 사용하세요. 📊 통계 총 템플릿: 144개 143개 완료, 1개 작업 중 적용 범위: 2013-2026 | 평균 CVSS: 8.3 | CISA KEV: 70 심각도: Critical: 85 | High:...

apidetector

APIDetector is a powerful and efficient tool designed for testing exposed Swagger endpoints in various subdomains with unique smart capabilities to detect false-positives. It's particularly useful for security professionals and developers who are engaged in API testing and vulnerability scanning...

pyt

.. image:: https://travis-ci.org/python-security/pyt.svg?branch=master :target: https://travis-ci.org/python-security/pyt .. image:: https://readthedocs.org/projects/pyt/badge/?version=latest :target: http://pyt.readthedocs.io/en/latest/?badge=latest .. image::...

brakeman

Brakeman Brakeman은 Ruby on Rails 애플리케이션의 보안 취약점을 검사하는 정적 분석 도구입니다. 설치 RubyGems 사용: root@kitploit: gem install brakeman Bundler 사용: root@kitploit: group :development do gem 'brakeman', require: false end Docker 사용: root@kitploit: docker pull presidentbeef/brakeman 소스에서 Docker 빌드: root@kitploit: gi...

IoTGoat

OFFICIAL REPO HAS BEEN MOVED TOhttps://github.com/OWASP/IoTGoat Description The IoTGoat Project is a deliberately insecure firmware based on OpenWrt and maintained by OWASP to educate users how to test for the most common vulnerabilities found in IoT devices. The vulnerability challenges are base...

WebGoat.NET

Webgoat.NET Source Code: https://github.com/jerryhoff/WebGoat.NET Download zip: https://github.com/jerryhoff/WebGoat.NET/zipball/master This web application is a learning platform that attempts to teach about common web security flaws. It contains generic security flaws that apply to most web...

badkeys

badkeys 알려진 취약점이 있는지 암호화 공개 키를 확인하는 도구 및 라이브러리 무엇인가요? badkeys는 다양한 형식의 공개 키에서 알려진 취약점을 확인합니다. 웹 버전은 badkeys.info에서 찾을 수 있습니다. 설치 badkeys는 pip를 통해 설치할 수 있습니다: root@kitploit: pip3 install badkeys 가상 환경을 사용하는 것이 좋습니다. 다양한 설치 옵션에 대한 자세한 내용은 공식 Python 문서를 확인하세요. 또는 git 저장소에서 직접 ./badkeys-cli를 호출할 수...

w3af

w3af - Web Application Attack and Audit Framework w3af is an open source web application security scanner which helps developers and penetration testers identify and exploit vulnerabilities in their web applications. The scanner is able to identify 200+ vulnerabilities, including Cross-Site...

GHSA-H4X7-GW46-3WM6 vulnerabilities

Vulnerabilities for packages: py3-httpx2...

CVE-2026-84382 vulnerabilities

Vulnerabilities for packages: py3-httpx2...

recox

Recox v2.0 RecoX is an incredibly versatile and powerful tool that is specifically designed to aid in the identification and classification of vulnerabilities within web applications. The script is able to detect vulnerabilities that are not typically included in the OWASP top ten vulnerabilities...

boko

boko Application Hijack Scanner for macOS boko.py is an application scanner for macOS that searches for and identifies potential dylib hijacking and weak dylib vulnerabilities for application executables, as well as scripts an application may use that have the potential to be backdoored. The tool...

xvna

XVNA Экстремально уязвимое Node-приложение XVNA — это экстремально уязвимое Node-приложение, написанное на Node.js Express.js/MongoDB, которое помогает энтузиастам безопасности изучать безопасность приложений. Не рекомендуется размещать это приложение в интернете, так как оно изначально уязвимо. ...

sonar.js

sonar.js A framework for identifying and launching exploits against internal network hosts. Works via WebRTC IP enumeration, WebSocket host scanning, and external resource fingerprinting. How does it work? Upon loading the sonar.js payload in a modern web browser the following will happen: sonar....

skill-scanner

Skill Scanner A best-effort security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns. Combines YAML + YARA, , and to maximize detection coverage of probable threats while minimizing false positives...

patch-checker

PatchChecker This is the code base for the service running on: https://patchchecker.com. In short, PatchChecker is a web application running on flask that provides output similar to that of Watson. However by using PatchChecker, one is not required to execute a binary on the target machine...

web-hacking-playground

Web Hacking Playground Description Web Hacking Playground is a controlled web hacking environment. It consists of vulnerabilities found in real cases, both in pentests and in Bug Bounty programs. The objective is that users can practice with them, and learn to detect and exploit them. Other topic...