SkillSpector

SkillSpector Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks before installing agent skills. Overview AI agent skills used by Claude Code, Codex CLI, Gemini CLI, etc. execute with implicit trust and minimal vetting. In the 31,132-skill analyzed...

AutoPWN-Suite

AutoPWN Suite AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically. Features CLI Fully automatic scanning and exploitation Detect network IP range without any user input Vulnerability detection based on service versions Web app vulnerability testing LFI, XS...

CVE-2019-0708

CVE-2019-0708 Vulnerability MSF Batch Inspection Plugin...

Nettacker

OWASP Nettacker DISCLAIMER THIS SOFTWARE WAS CREATED FOR AUTOMATED PENETRATION TESTING AND INFORMATION GATHERING. YOU MUST USE THIS SOFTWARE IN A RESPONSIBLE AND ETHICAL MANNER. DO NOT TARGET SYSTEMS OR APPLICATIONS WITHOUT OBTAINING PERMISSIONS OR CONSENT FROM THE SYSTEM OWNERS OR ADMINISTRATORS...

POC-CVE-2018-6574

POC-CVE-2018-6574 Just playing with this vulnerability on a target 😅...

cve-2020-35498-flag

cve-2020-35498-flag Flag the cve-2020-35498 attack Build Requires gcc and go. make Filter The filter was built with bpfasm and placed in filter.c. Catch the vulnerability with sudo ./target/catch Trigger with Trigger the vulnerability through interface wlan0 with destination aa:bb:cc:dd:ee:ff. su...

hackerone-reports

Live site: reddelexc.github.io/hackerone-reports Tops of HackerOne reports. All reports' raw info stored in data.csv. Scripts to update this file are written in Python 3 and require chromedriver and Chromium executables at PATH. Every script contains some info about how it works. The run order of...

BWASP

BWASP The BoB Web Application Security Project BWASP is an open-source, analysis tool to support for Web Vulnerability Manual Analysis hackers. The BWASP tool basically provides predicted information through vulnerability analysis without proceeding with an attack. BWASP supports performing...

defending-code-reference-harness

Defending Code Reference Harness A reference implementation for autonomous vulnerability discovery and remediation with Claude, based on our learnings from partnering with security teams at several organizations since launching Claude Mythos Preview. For a write up of these learnings along with...

RDS_CVE-2019-0708

RDSCVE-2019-0708...

sicat

SICAT - The useful vulnerability and exploit finder SICAT is a powerful tool designed to aggregate and search for vulnerabilities and exploits from multiple high-profile sources. It simplifies the reconnaissance phase by automatically checking reputable databases based on keywords, Nmap scan...

CVE-2019-12725

CVE-2019-12725 CVE-2019-12725 ZeroShell Remote Command Execution Vulnerability =================================================== My own practice project...

cve-2015-3636_crash

This repository does not have a README...

shodan-dorks

Shodan dorks Description: This GitHub repository provides a range of search queries, known as "dorks," for Shodan, a powerful tool used to search for Internet-connected devices. The dorks are designed to help security researchers discover potential vulnerabilities and configuration issues in...

apachrot

Apache Linux CVE-2021-41773/2021-42013 Mass Vulnerability Checker Automatic Mass Tool for checking vulnerability in Apache Linux 2.4.49/50 Using GNU Parallel. You must have parallel for running this tool Install Parallel Linux : command apt-get install parallel -y Windows : You can install WSL...

userefuzz

User-Agent , X-Forwarded-For and Referer SQLI Fuzzer made with python Works onlinux and unix based systems Legal Disclaimer Usage of userefuzz for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws...

CVE-2014-3704

This repository does not have a README...

cve-2018-15877

CVE-2018-15877 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-15877 Image author: https://github.com/cved-sources/cve-2018-15877...

VulnLab

VulnLab A web vulnerability lab project developed by Yavuzlar. Logo Vulnerabilities SQL Injection Cross Site Scripting XSS Command Injection Insecure Direct Object References IDOR Cross Site Request Forgery CSRF XML External Entity XXE Insecure Deserialization File Upload File Inclusion Broken...

cve-2016-9838

CVE-2016-9838 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2016-9838 Image author: https://github.com/cved-sources/cve-2016-9838...