163 matches found
CVE-Factory
CVE-Factory：コードセキュリティ脆弱性のためのエキスパートレベルのエージェントタスクのスケーリング CVE-Factoryは、完全自動化されたエンドツーエンドのCVE再現のためのマルチエージェントシステムです。CVEレコードを入力すると、システムは自動的に詳細を調査し、テストケースを生成し、Docker環境を構築し、各脆弱性が悪用可能かつパッチ可能であることを検証します。このパイプラインは、人手を介さずにCVEメタデータを再現可能でテスト可能な脆弱性環境に変換します。 ⚠️ セキュリティ警告 :...
caido
Website • Dashboard • Docs • Roadmap • Branding • Discord 👋 Welcome Welcome to Caido! Caido aims to help security professionals and enthusiasts audit web applications with efficiency and ease. Here you can get involved with the development of our software. You can learn about upcoming Caido...
CVE-2017-5638
CVE-2017-5638 이 스크립트는 Apache Struts 2 취약점CVE-2017-5638, 일명 Struts-Shock을 검증하기 위한 것입니다. 악성 페이로드를 주입하지 않고 오직 'STRUTS2-VALIDATION'이라는 HTTP 헤더만 주입하여 취약한지 여부를 검증할 수 있으므로 완전히 무해합니다. 멀티스레드 기능 덕분에 전 세계에 분산된 2.5k개 이상의 애플리케이션을 10분 이내에 실행할 수 있습니다. 따라서 대규모 엔터프라이즈 애플리케이션을 검증하는 데 매우 유용합니다. cve-2017-5638...
What Is Agentic Pentesting? What It Proves, and Where It Stops.
If you’re evaluating an agentic pentesting solution right now, you’ve probably heard the same pitch more than once: point it at a target, and it discovers, validates, and exploits attack paths autonomously, the way a real attacker would. That promise is worth taking seriously. It’s also worth...
CVE-2008-1930
CVE-2008-1930 エクスプロイト文書化ガイド ドキュメント情報 目的: 教育および認可されたセキュリティ評価の文書化 脆弱性: CVE-2008-1930 対象読者: セキュリティアナリスト、ペネトレーションテスター、学生 環境: 管理・認可されたテストラボ 目次 1. はじめに 2. 範囲と目的 3. ラボ環境 4. 方法論の概要 5. ツール1 – NSLookup 6. ツール2 – Nmap 7. ツール3 – Searchsploit 8. ツール4 – Gobuster 9. ツール5 – WPScan 10. ツール6 – VirtualBox 11. ツール7 ...
AERA
AERA: Autonomous Exploit Research Assistant !Python 3.11+...
mi-x
Am I Exploitable? Author: 2022年 - 現在, Rezilion Description: 脆弱性の検証 Development: 2022年1月 - 現在 Documentation: ウェブサイト、READMEを参照 はじめに 説明 ' Am I Exploitable?' は、システムが特定の脆弱性に対して悪用可能かどうかを検証するニーズに応えるために作られたPythonオープンソースプロジェクトです。...
ProofCMS-
ProofCMS ProofCMS is a modular Python toolkit for detecting c...
proofcms
ProofCMS ProofCMS is a modular Python toolkit for detecting c...
Exploit for Interpretation Conflict in Wordpress
CVE-2026-63030 | WP2Shell xpl0ited by gr1txhttps://gith...
Antiproof: Synthesizing Vulnerability Detectors and Proofs of Exploitability
Discovering vulnerabilities before attackers exploit them requires high recall and reliable automatic validation, but existing approaches struggle to achieve both without prohibitive cost. We present Antiproof, an end-to-end vulnerability discovery system that combines neuro-symbolic detector...
AI_AutoExploitGeneration
🎯 AI-POWERED AUTOMATED EXPLOIT GENERATION AEG SYSTEM Vers...
gemini-bug-bounty
Gemini Bug Bounty Find security vulnerabilities, get paid...
V2E: Validating Smart Contract Vulnerabilities through Profit-Driven Exploit Generation and Execution
Smart contracts are a critical component of blockchain systems. Due to the large amount of digital assets carried by smart contracts, their security is of critical importance. Although numerous tools have been developed for detecting smart contract vulnerability, their effectiveness remains...
The Face of Penetration Testing is Changing: Announcing Metasploit Pro 5.0.0
The role and demand for red-teaming capabilities are growing, as more exploitable CVEs make their way into criminal hands. Being proactive is no longer a capability that can be reserved for annual tests, but a continuous assessment to determine exposure and even through the validation of an...
poc_framework
pocframework A framework for vul...
Cyber Threat Exposure Management: A 5-Step Guide
Attackers don’t care about your long list of CVEs. They look for the path of least resistance to your most valuable assets. So, why are we still managing security from a defender’s checklist instead of an attacker’s playbook? A modern security program needs to see the entire attack surface throug...
GAPS: Guiding Dynamic Android Analysis with Static Path Synthesis
Dynamically resolving method reachability in Android applications remains a critical and largely unsolved problem. Despite notable advancements in GUI testing and static call graph construction, current tools are insufficient for reliably driving execution toward specific target methods, especial...