reconmap

Reconmap Pentesting Management, Automation and Reporting Platform Reconmap is an open source vulnerability assessment and penetration testing platform designed to support security professionals throughout the entire engagement lifecycle. It enables penetration testers and InfoSec teams to...

fluffi

FLUFFI FLUFFI - A distributed evolutionary binary fuzzer for pentesters. About the project High level overview Beginner Tutorial Getting started Usage HOWTOs Technical Details Contributing to FLUFFI LICENSE Bugs found So far, FLUFFI was almost exclusively used on SIEMENS products and solutions...

nautilus

Nautilus 2.0 Nautilus is a coverage guided, grammar based fuzzer. You can use it to improve your test coverage and find more bugs. By specifying the grammar of semi valid inputs, Nautilus is able to perform complex mutation and to uncover more interesting test cases. Many of the ideas behind this...

evine

Evine Interactive CLI Web Crawler. Evine is a simple, fast, and interactive web crawler and web scraper written in Golang. Evine is useful for a wide range of purposes such as metadata and data extraction, data mining, reconnaissance and testing. If you like the project, give it a star. It forces...

electronegativity

Electronegativity ⚠️ We're no longer actively maintaining this project ⚠️ What's Electronegativity? Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron-based applications. It leverages AST and DOM parsing to look for security-relevant configurations, as...

TPMGenie

TPM Genie TPM Genie è progettato per assistere nella ricerca di vulnerabilità dei Trusted Platform Module. Funzionando come un interposer per bus seriale, TPM Genie è in grado di intercettare e modificare tutto il traffico inviato attraverso il canale I2C tra la macchina host e un chip TPM...

truegaze

truegaze A static analysis tool for Android and iOS applications focusing on security issues outside the source code such as resource strings, third party libraries and configuration files. Requirements Python 3 is required and you can find all required modules in the requirements.txt file. Only...

commix

Commix short for command injection exploiter is an open source penetration testing tool, written by Anastasios Stasinopoulos @ancst, that automates the detection and exploitation of command injection vulnerabilities. You can visit the collection of screenshots demonstrating some of the features o...

phpstan

PHPStan - PHP Static Analysis Tool PHPStan focuses on finding errors in your code without actually running it. It catches whole classes of bugs even before you write tests for the code. It moves PHP closer to compiled languages in the sense that the correctness of each line of the code can be...

Adversarial-Detection-Engineering-Framework

Framework ADE Adversarial Detection Engineering Supera i Falsi Negativi comprendendo come la logica di rilevamento fallisce prima che gli attaccanti la sfruttino. Visita il sito web: https://adeframework.org/ Cos'è ADE? Adversarial Detection Engineering ADE è la disciplina del ragionamento sui...

sqlancer

SQLancer is a tool to automatically test Database Management Systems DBMSs in order to find bugs in their implementation. That is, it finds bugs in the code of the DBMS implementation, rather than in queries written by the user. SQLancer has found hundreds of bugs in mature and widely-known DBMSs...

idacode

IDACode IDACode makes it easy to execute and debug Python scripts in your IDA environment without leaving Visual Studio Code. The VS Code extension can be found on the marketplace. IDACode is still in a very early state and bugs are to be expected. Please open a new issue if you encounter any...

restler-fuzzer

RESTler What is RESTler? RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services. For a given cloud service with an OpenAPI formerly Swagger specification, RESTler analyzes its...

honggfuzz

Honggfuzz A security-oriented, feedback-driven, evolutionary fuzzer. Honggfuzz is a general-purpose fuzzer that uses code coverage software and hardware-based to find bugs. It is multi-process, multi-threaded, and supports persistent fuzzing for extreme speed. Key Features Fast : Multi-process an...

MiracleLinux 9 : thunderbird-140.13.0-1.el9_8.ML.1 (AXSA:2026-1625:19)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1625:19 advisory. firefox: thunderbird: Site isolation issue in the DOM: Navigation component CVE-2026-15719 firefox: thunderbird: Invalid pointer in the JavaScript:...

Web3Bugs

स्मार्ट कॉन्ट्रैक्ट्स में शोषणीय बग्स को समझना इस परियोजना का उद्देश्य Web3 डेवलपर्स और सुरक्षा विश्लेषकों के लिए एक मूल्यवान संसाधन उपलब्ध कराना है, ताकि स्मार्ट कॉन्ट्रैक्ट्स में शोषणीय बग्स की उनकी समझ को सुगम बनाया जा सके। हम code4rena से निकाले गए शोषणीय बग्स का गहन विश्लेषण करते हैं और...

CVE-2026-74989

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these cou...

Kernel_Driver_bugs

इस रिपॉजिटरी में README नहीं है।...

SecBugs

Sicherheitsfehler Vollständige Offenlegungen zu CVE-IDs, Proofs of Concept, Exploits, 0-Day-Bugs und so weiter...

Cooper-ndss-2022

Cooper: Testen des Bindungscodes von Skriptsprachen mit kooperativer Mutation Cooper nutzt kooperative Mutation, um den Bindungscode von Skriptsprachen zu testen und Memory-Safety-Probleme zu finden. Kooperative Mutation modifiziert gleichzeitig den Skriptcode und die zugehörigen Dokumentobjekte,...