commix

Commix short for command injection exploiter is an open source penetration testing tool, written by Anastasios Stasinopoulos @ancst, that automates the detection and exploitation of command injection vulnerabilities. You can visit the collection of screenshots demonstrating some of the features o...

gitcolombo

Gitcolombo Herramienta OSINT que extrae identidades — nombres, correos electrónicos y enlaces entre cuentas aparentemente no relacionadas — de repositorios git y GitHub. CLI de Python gitcolombo.py — clona repos, recorre git log y puede llamar a la API de GitHub para señales más ricas. Versión we...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

git-vuln-finder

git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix regarding a software vulnerability. The search is based on a set of regular expressions against the commit messages only. If CVE ID...

CVE-2022-44268

Project moved Project has been moved to https://git.rotfl.io/v/CVE-2022-44268...

autoSource

AutoSource AutoSource es un marco de revisión automatizada de código fuente integrado con SonarQube, capaz de realizar análisis/revisiones estáticas de código. Se puede utilizar para encontrar vulnerabilidades de manera efectiva en una etapa muy temprana del SDLC Ciclo de Vida del Desarrollo de...

kismet

https://www.kismetwireless.net La documentación de Kismet se puede encontrar y leer más fácilmente en el sitio web de Kismet El repositorio de documentación se encuentra en: root@kitploit: $ git clone https://www.kismetwireless.net/git/kismet-docs.git y duplicado en Github en: root@kitploit: $ gi...

snallygaster

snallygaster Encuentra fugas de archivos y otros problemas de seguridad en servidores HTTP. ¿qué? snallygaster es una herramienta que busca archivos accesibles en servidores web que no deberían ser públicos y que pueden suponer un riesgo de seguridad. Los ejemplos típicos incluyen repositorios gi...

cve-2018-15877

CVE-2018-15877 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-15877 Image author: https://github.com/cved-sources/cve-2018-15877...

Exploits + Shellcode + GHDB

漏洞利用数据库 Git 仓库 这是漏洞利用数据库的官方仓库，一个由Offensive Security赞助的项目。 我们的仓库包括： 漏洞利用与Shellcode：gitlab.com/exploit-database/exploitdb 二进制漏洞利用：gitlab.com/exploit-database/exploitdb-bin-sploits 论文：gitlab.com/exploit-database/exploitdb-papers...

wxHexEditor

wxHexEditor Repositorio GIT oficial de wxHexEditor Para más información: http://www.wxhexeditor.org Instrucciones de compilación ¡Simplemente ejecuta make! Dependencias de compilación en Linux wxgtk;...

expel-intel

expel-intel 这里是 Expel 情报团队的大本营。 在这里，我们将分享 IOC 以及其他要么不适合放入其他媒介、要么特别适合放入 git 仓库的信息。 保持安全，行善积德，保重身体，玩得开心！ 本仓库仅供参考。...

gitpwnd

GitPwnd GitPwnd is a tool to aid in network penetration tests. GitPwnd allows an attacker to send commands to compromised machines and receive the results back using a git repo as the command and control transport layer. By using git as the communication mechanism, the compromised machines don't...

CVE-2021-3572

CVE-2021-3572 This repository is designed for testing CVE-2021-3572 in pypa/pip. For more information, see these resources: CVE page: https://vulners.com/cve/CVE-2021-3572 PR where vulnerability was fixed: https://github.com/pypa/pip/pull/9827 Issue with more discussion:...

bash-cve-2014-6271-fixes

CVE-2014-6271 patches for bash The original mailing list post only lets you fetch the patches over unauthenticated HTTP. Sigh I've downloaded these over HTTP and put them into a git repository that you can fetch over HTTPS and check independently. I have not checked whether these files are...

web_exploit_detector

Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...

gitbleed_tools

GitBleed Tools - ミラーリングされたGitリポジトリからデータを抽出するためのツール 概要 このリポジトリには、クローンとミラーリングされたGitリポジトリ間の差分をダウンロードして分析するためのシェルスクリプトが含まれています。Gitの動作に関する根本的な癖の詳細については、ブログ記事をご覧ください。 これらのスクリプトの機能...

CVE-2025-31722

CVE-2025-31722 — Jenkins Templating Engine RCE For educational and authorized security research purposes only. Description Sandbox bypass vulnerability in the Jenkins Templating Engine JTE plugin = 2.5.3 that allows a low-privileged user to execute arbitrary code on the Jenkins server. The flaw...

CVE-2025-64424-Coolify-

Coolify CVE-2025-64424 RCE Vulnerability Lab Lesson Plan: Red74-Coolio-CVE-2025-64424 Disclaimer: This repository contains a deliberately vulnerable version of Coolify and is intended for educational purposes, CTF environments, and cybersecurity training. Do not deploy this in a production...

DiffCatcher

Support Development If this project helps your work, support ongoing maintenance and new features. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. A Rust CLI tool that recursively discovers Git repositories, captures state changes,...