163 matches found
CVE-Factory
CVE-Factory: Scaling Expert-Level Agentic Tasks for Code Security Vulnerability CVE-Factory is a Multi-Agent system for fully automated, end-to-end CVE reproduction. Given CVE records, the system automatically researches details, generates test cases, builds Docker environments, and validates tha...
caido
Website • Dashboard • Docs • Roadmap • Branding • Discord 👋 Welcome Welcome to Caido! Caido aims to help security professionals and enthusiasts audit web applications with efficiency and ease. Here you can get involved with the development of our software. You can learn about upcoming Caido...
mi-x
Am I Exploitable? Author: 2022 - Now, Rezilion Description: Vulnerabilities validation Development: January 2022 - Now Documentation: See website, README Introduction Description ‘Am I Exploitable?’ is a python open source project that comes to meet the need of validating if your system is...
CVE-2017-5638
CVE-2017-5638 This script is intended to validate Apache Struts 2 vulnerability CVE-2017-5638, AKA Struts-Shock. This is a completely harmless as it does not inject any malicious payload, only inject an HTTP header named 'STRUTS2-VALIDATION' in order to be able to validate whether is vulnerable...
What Is Agentic Pentesting? What It Proves, and Where It Stops.
If you’re evaluating an agentic pentesting solution right now, you’ve probably heard the same pitch more than once: point it at a target, and it discovers, validates, and exploits attack paths autonomously, the way a real attacker would. That promise is worth taking seriously. It’s also worth...
CVE-2008-1930
CVE-2008-1930 Exploitation Documentation Guide Document Information Purpose: Educational and authorized security assessment documentation Vulnerability: CVE-2008-1930 Audience: Security Analysts, Penetration Testers, Students Environment: Controlled and Authorized Testing Lab Table of Contents 1...
AERA
AERA: Autonomous Exploit Research Assistant !Python 3.11+...
ProofCMS-
ProofCMS ProofCMS is a modular Python toolkit for detecting c...
proofcms
ProofCMS ProofCMS is a modular Python toolkit for detecting c...
Exploit for Interpretation Conflict in Wordpress
CVE-2026-63030 | WP2Shell xpl0ited by gr1txhttps://gith...
Antiproof: Synthesizing Vulnerability Detectors and Proofs of Exploitability
Discovering vulnerabilities before attackers exploit them requires high recall and reliable automatic validation, but existing approaches struggle to achieve both without prohibitive cost. We present Antiproof, an end-to-end vulnerability discovery system that combines neuro-symbolic detector...
AI_AutoExploitGeneration
🎯 AI-POWERED AUTOMATED EXPLOIT GENERATION AEG SYSTEM Vers...
gemini-bug-bounty
Gemini Bug Bounty Find security vulnerabilities, get paid...
V2E: Validating Smart Contract Vulnerabilities through Profit-Driven Exploit Generation and Execution
Smart contracts are a critical component of blockchain systems. Due to the large amount of digital assets carried by smart contracts, their security is of critical importance. Although numerous tools have been developed for detecting smart contract vulnerability, their effectiveness remains...
The Face of Penetration Testing is Changing: Announcing Metasploit Pro 5.0.0
The role and demand for red-teaming capabilities are growing, as more exploitable CVEs make their way into criminal hands. Being proactive is no longer a capability that can be reserved for annual tests, but a continuous assessment to determine exposure and even through the validation of an...
poc_framework
pocframework A framework for vul...
Cyber Threat Exposure Management: A 5-Step Guide
Attackers don’t care about your long list of CVEs. They look for the path of least resistance to your most valuable assets. So, why are we still managing security from a defender’s checklist instead of an attacker’s playbook? A modern security program needs to see the entire attack surface throug...
GAPS: Guiding Dynamic Android Analysis with Static Path Synthesis
Dynamically resolving method reachability in Android applications remains a critical and largely unsolved problem. Despite notable advancements in GUI testing and static call graph construction, current tools are insufficient for reliably driving execution toward specific target methods, especial...