MinimalReproducer

After significant efforts, stripped it down to a minimal replicator. This is just an empty project to demonstrate the issue with dependency-check-maven usage I am forced on doing by my company rules. Do check the pom.xml and do verify: mvn org.owasp:dependency-check-maven:RELEASE:aggregate Or if...

EagleEye

EagleEye: With the addition of the -ss option in HTTPX by Project Discovery, it is now possible to create a list of potentially vulnerable URLs with gf xss and qsreplace with the XSS payload, such as alerthacked. HTTPX will then visit all the URLs and take screenshots of them, which are stored in...

DakshSCRA

Daksh SCRA Source Code Review Assist root@kitploit: Author: - Debasis Mohanty [email protected] - Twitter / X: @coffeensecurity - www.coffeeandsecurity.com About Daksh SCRA Daksh SCRA Source Code Review Assist is built to enhance the efficiency of the source code review process, providing a...

CakeFuzzer

CakeFuzzer Latest release : 1.0 License : GNU GPL v3.0 Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives. Currently it is implemented to support the Cake...

dns_amplification_scanner

DNS Amplification DDoS Detection and Verification Tool This script is designed to identify and verify potential DNS servers vulnerable to exploitation in DNS amplification distributed denial-of-service DDoS attacks. It addresses the limitations of automated vulnerability scanners like Nessus, whi...

vulnrepro-benchmark

VulnRepro A benchmark that checks if an AI model can actually review vulnerable code, or if it just sounds confident. Most security benchmarks ask one question: can the model find the bug? That is only half the job. The other half, the part that actually wears you down in real review work, is not...

ffufPostprocessing

Ffuf: Post procesamiento Desafortunadamente, a pesar de su bandera "-ac", ffuf tiende a producir muchas entradas irrelevantes. Por eso he creado una herramienta de post-procesamiento para filtrar esas entradas. Además, vi que se eliminaban muchas entradas relevantes cuando se usaba "-ac" -...

HostileSubBruteforcer

HostileSubBruteforcer This app will bruteforce for exisiting subdomains and provide the following information: IP address Host if the 3rd party host has been properly setup. for example if site.example.com is poiting to a nonexisiting Heroku subdomain, it'll alert you - Currently only works with...

automatic-api-attack-tool

Automatic API Attack Tool Imperva's customizable API attack tool takes an API specification as an input, and generates and runs attacks that are based on it as an output. The tool is able to parse an API specification and create fuzzing attack scenarios based on what is defined in the API...

jackhammer

Jackhammer: One Security vulnerability assessment/management tool to solve all the security team problems. What is Jackhammer? Jackhammer is a collaboration tool built with an aim of bridging the gap between Security team vs dev team, QA team and being a facilitator for TPM to understand and trac...

msgpack-CVE-2021-23410-test

Test for https://snyk.io/vuln/SNYK-JS-MSGPACK-1296122 This looks like not vulerbility. root@kitploit: var assert = require'assert'; var msgpack = require'msgpack'; function sleepms return new Promiseresolve = setTimeoutresolve, ms; ; async function init var normal = "a": 1, "b": 2, "c": 1, 2, 3 ;...

ESCepcion

🛡️ ESCepcion Active Directory Certificate Services Auditor ESCepcion es una herramienta de código abierto Open Source para la auditoría y evaluación de vulnerabilidades en infraestructuras de Active Directory Certificate Services AD CS. Está diseñada para automatizar la detección de rutas de...

apidetector

APIDetector 是一款强大且高效的工具，专为测试各个子域名中暴露的 Swagger 端点而设计，具有独特的智能能力来检测误报。对于从事 API 测试和漏洞扫描的安全专业人员和开发者尤其有用。 已在 BlackHat Arsenal 2024 上展示（链接） 版本历史 版本 3 新增功能（当前版本） 现代化 Web 界面 ：用户友好的界面，便于进行 API 端点扫描 实时结果 ：实时更新发现的端点和漏洞 交互式仪表盘 ：使用 Tailwind CSS 和 Alpine.js 构建的简洁且响应式的用户界面 文件上传支持 ：通过上传文本文件一次性扫描多个域名/子域名 域名验证...

phantom-playbooks

Este es el repositorio de Corelight para los playbooks de la comunidad desarrollados para Splunk Phantom. Estos proporcionan algunos ejemplos para que puedas crear tus propios playbooks. Corelight Investigate DNS Alert Este playbook toma una búsqueda guardada o un mecanismo de alerta para DNS de...

gokart

GoKart - Go 安全静态分析 GoKart 是一款针对 Go 语言的静态分析工具，它利用 Go 源码的 SSA（单静态赋值）形式来发现漏洞。该工具能够追踪变量和函数参数的来源，判断输入源是否安全，从而相比其他 Go 安全扫描器减少误报数量。例如，通常与变量拼接的 SQL 查询可能被标记为 SQL 注入；但 GoKart 能够判断该变量是否实际上是常量或常量等价物，这种情况下并不存在漏洞。 GoKart 还为 Chariot （Praetorian 的安全平台）提供动力，帮助您发现、管理并修复源码及云环境中的漏洞。Chariot 让您能够轻松对源码进行自动化、持续的 GoKart...

golang-fips: Golang FIPS zeroed buffer

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...

CVE-2026-51302-PoC

CVE-2026-51302：技术不一致性 抱歉使用了标题党式的仓库名称，但这个 CVE 完全是 LLM 幻觉生成的垃圾内容，看到 CNA 竟然接受了如此不一致的声明，实在令人遗憾 💔 结论 CVE-2026-51302 并不存在 😱 公开的 SQL 无法在 AddressSanitizer 下于任何 SQLite 3.41 版本中复现释放后使用（use-after-free）。更重要的是，所声称的根本原因与受影响源码完全不符： exprComputeOperands 在 SQLite 3.41.0、3.41.1 和 3.41.2 中不存在； 该函数于 2025 年 6 月 30 日引入...

l4j-fp1

log4shell false positive This is a simple web project with a sanitised log4shell vulnerability. For an unsanitised version, see https://github.com/scabench/l4j-tp1/. The project defines a simple scabench.HelloWorldService get service returning a plain text string hello world. The service does not...

jsonorg-fp3

json.org CVE-2022-45688 false positive The project contains a json.org dependency with CVE-2022-45688. It does invoke the vulnerable class, but the input data is sanitised with a simple method of counting characters, therefore estimating the max depth of the DOM tree to be generated, and enforcin...

jsonorg-fp2

json.org CVE-2022-45688 false positive The project contains a json.org dependency with CVE-2022-45688. It does invoke the vulnerable class, but the input data is hardcoded and not suitable to trigger a DoS attack. The vulnerability can therefore not be exploited for a DoS attack. Both...