kube-alien

Kube-alien This tool launches attack on k8s cluster from within. That means you already need to have an access with permission to deploy pods in a cluster to run it. After running the kube-alien pod it tries to takeover cluster's nodes by adding your public key to node's /root/.ssh/authorizedkeys...

CVE-2023-46604-ActiveMQ-RCE-pseudoshell

CVE-2023-46604 RCE 疑似シェル このスクリプトは、CVE-2023046604 Apache ActiveMQ を利用して疑似シェルを生成します。この脆弱性は、OpenWire プロトコル内の安全でない逆シリアライゼーションにより、リモートコード実行を可能にします。 説明 CVE-2023-46604 は、Apache ActiveMQ の OpenWire プロトコルに存在する逆シリアライゼーションの脆弱性です。この欠陥は、攻撃者が ActiveMQ が稼働しているサーバー上で任意のコードを実行するために悪用される可能性があります。攻撃者は悪意のある XML...

bug-bounty-library

Bug Bounty / Original Findings Library Folders are numbered in the order a hunter actually works - first to last. Start at 00-hunt/00-INDEX. Run the hunt from 00-hunt/ALPHA. This README is only the map. Authorization only. Safe harbor, VDP, GitHub PVR, or coordinated disclosure. No other-customer...

CVE-2023-38408

CVE-2023-38408 OpenSSH バージョン 9.3p2 に影響する最近の重大な脆弱性に対するPoC この脆弱性を扱うTryHackMeの無料アクセスラボ環境とシームレスに動作するよう設計されています。 https://tryhackme.com/room/cve202338408 注記： これはTHMラボ環境の外では動作しません 。 https://github.com/kali-mx/CVE-2023-38498/assets/76034874/21382c5b-9468-494d-93c7-ff2b996a4be5...

CVE-2015-3636

このリポジトリには README がありません。...

nvd

nvd 一个用 Go 编写的快速、简单的库，用于从 NVD（美国国家漏洞数据库）数据源获取 CVE。 安装 root@kitploit: go get github.com/daehee/nvd 用法 nvd 包提供了一个 Client，用于从官方 NVD 数据源获取 CVE： root@kitploit: // nvd client with ./tmp working dir client, err := NewClient"tmp" // Fetch single CVE cve, err := client.FetchCVE"CVE-2020-14882" // Fetch al...

0day-Rubbish

0day Rubbish 0day vulnerabilities have become rubbish in the AI era...

ship-safe

リスクのあるコード、AIエージェントの脆弱性、サプライチェーン問題を、リリース前に検出します。 Webサイト · ドキュメント · セキュリティとデータフロー · ベンチマーク · 料金 · ブログ · コントリビュート Ship Safe CLI Ship Safeは、現代のソフトウェアチーム向けのAIセキュリティスキャナーです。リポジトリ内でローカルに実行され、アプリケーションコード、AIエージェント、MCP設定、プロンプト、依存関係、CI/CD、シークレット、クラウド関連設定にわたる問題を検出し、安全な修正のレビューと適用を支援します。 1つのコマンドでスキャンを開始:...

android-security-awesome

android-security-awesome Android 보안 관련 리소스 모음입니다. 1. 도구 2. 학술/연구/간행물/도서 3. 익스플로잇/취약점/버그 도구 온라인 분석기 1. Appknox - 유료 2. Virustotal 3. NowSecure Lab Automated - Android 및 iOS 모바일 앱 보안 테스트를 위한 엔터프라이즈 도구입니다. Lab Automated은 클라우드의 실제 기기에서 동적 및 정적 분석을 수행하여 몇 분 안에 결과를 반환합니다. 유료 4. App Detonator - APK...

Anthropic-Credited-CVEs

ANTHROPIC CVE TRACKER Overview Tracking vulnerabilities that credit the Anthropic research team and are possibly discovered by Project Glasswing. CURRENT CVE COUNT: 149 Initial Research Tracking CVEs Attributed to Anthropic Researchers and Project Glasswing Add a Vulnerability If you find an...

Awesome-LLMs-for-Vulnerability-Detection

Awesome Large Language Models for Vulnerability Detection A curated list of papers, projects, and agent skills on using LLMs for vulnerability detection and discovery. 📄 Papers Only showing 2025 and later. For earlier work, see Papers Archive 2024 and earlier...

missing-cve-nuclei-templates

Weekly updated list of missing CVEs in nuclei templates official repository Note This repository is 100% automated so there can be errors, but in general is pretty accurate. Go to section "How it works" to understand how data is collected. Stats 📊 CVEs analyzed : 167758 CVEs missing : 66838...

awesome-list

Awesome Cybersecurity List My personal collection of awesome blog posts, write-ups, and papers focusing on cybersecurity. For a deeper dive into cybersecurity-related tools, check out the dedicated Cybersecurity Tools list. Outline 2026 2025 2024 2023 2022 2021 2020 2019 2018 2017 2016 2014 2011...

CVE-2026-16723

CVE-2026-16723 Exploit A standalone C++17 implementation for CVE-2026-16723 , a critical vulnerability affecting Fastjson versions 1.2.68 – 1.2.83. Requirements Linux or WSL on Windows C++17 compatible compiler GCC 7+ or Clang 5+ CMake 3.10 or newer System packages: libzip-dev zlib1g-dev Debian /...

HIKRAVEN

HIKRAVEN 🛡️ Advanced Hikvision Security Assessment Platform - Professional Edition Features • Quick Start • Installation • Usage • Documentation • Disclaimer ⚠️ IMPORTANT LEGAL NOTICE ! THIS TOOL IS FOR AUTHORIZED SECURITY TESTING ONLY ! Unauthorized access to computer systems is illegal and...

cve-2025-9951-ffmpeg-jp2-poc

CVE-2025-9951 FFmpeg JPEG 2000 Exploitation Research This repository contains two deliberately separated exploitation milestones for the FFmpeg JPEG 2000 component-mapping vulnerability: 1. 01-gdb-assisted/ — the original deterministic GDB-launched PoC and its full research-journey writeup,...

VulnScan

VulnScan Scanner di vulnerabilita' web. Fa il crawling di un sito, trova form e parametri, e li prova contro SQL injection, XSS riflesso, path traversal e header di sicurezza mancanti. Produce un report a terminale, un PDF e ha una dashboard Flask. Progetto di apprendimento. L'ho scritto per capi...

scarce-apache2

ScaRCE Framework - CVE-2021-41773 헌터...

springcss-cve-2014-3625

このリポジトリには README がありません。...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...