KubeLight

OWASP KubeLight - Kubernetes Security Scanner Scan your Kubernetes Cluster for Security & Compliance 1. Scan K8s clusters to detect Misconfiguration. 2. Lightweight, Pure python, fast, multithreaded tool. 3. NoSQL Query Engine. 4. Realtime alerts on Slack 5. SBOM generation and Image Vulnerabilit...

Mimir

Mimir OSINT Threat Intel Interface - Named after the old Norse God of knowledge. Mimir functions as a CLI to HoneyDB which in short is an OSINT aggregative threat intel pool. Starting the program brings you to a menu the options for which are as follows. 1. Fetch Threat Feed 5. Visualize Top...

nmap-vulnerability-scan-scripts

Synopsys CyRC Vulnerability Advisory: https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps.html CVE-2022-45477, CVE-2022-45479, CVE-2022-45482, CVE-2022-45481...

bitbucket-iac-scan

Bitbucket Security: Infrastructure as Code Security Scanner Scans your Infrastructure as Code configuration files to ensure good security practises. Creates a security Code Insights report if issue is found. This Bitbucket Cloud supported Pipe leverages the industry leading KICS scanning tool to...

BurpBounty

Burp Bounty Free - Scan Check Builder BApp Store This Burp Suite extension allows you, in a quick and simple way, to improve the active and passive burpsuite scanner by means of personalized rules through a very intuitive graphical interface. Through an advanced search of patterns and an...

wp2shell-scan

wp2shell-scan Detect and clean upwp2shell CVE‑2026‑63030 compromise across one or many WordPress sites. wp2shell is the pre‑authentication remote‑code‑execution vulnerability fixed in WordPress 7.0.2 / 6.9.5 / 6.8.6 2026‑07‑17. A public PoC appeared within a day and mass‑exploitation followed...

security-code-scan

Vulnerability Patterns Detector for C and VB.NET - Website Downloading Official releases are available as nuget package, Visual Studio extension and stand-alone runner. Building git clone https://github.com/security-code-scan/security-code-scan.git cd security-code-scan Open SecurityCodeScan.sln...

rdp0708scanner

rdp0708scanner This is a CVE-2019-0708 scanner wrapper for the single thread 0708Detector, it dose a safe scan on a single or list of IPs. Usage python rdp0708scanner.py -t ip-address -f ip.lst -p port -x threads -v...

shai-hulud-scan

shai-hulud-scan A Claude Code skill that scans machines for indicators of compromise IOCs from the Mini Shai-Hulud supply chain worm CVE-2026-45321, CVSS 9.6. What is Mini Shai-Hulud? A self-propagating supply chain worm that compromised 170+ npm/PyPI packages on May 11, 2026 - including...

CVE-2025-0133-exploit

CVE-2025-0133 Scan A script written on python just to check the existence of a CVE-2025-0133 Reflected Cross-Site Scripting vulnerability that occurs in Palo Alto. The file getconfig.esp is detected and tested for XSS using the given script. Usage: darkfear@b0x:/CVE-2025-0133-exploit$ python3...

ShellShock-CGI-Scan

ShellShock-CGI-Scan A script, in C, to check if CGI scripts are vulnerable to CVE-2014-6271 The Bash Bug. Options: -i local ip-address -p port to listen -l site list -t connection timeout Default: 15s Example: $ ./Scanner -i 127.0.0.1 -p 31337 -l sites.txt -t 5 Starting listen in localhost on por...

CVE-2018-13379

CVE-2018-13379 CVE-2018-13379 Module for Router Scan Project How To Use prepare pip3 install time,threading,ipcalc,requests usage python3 exp.py -f list.txt Copyright some part of this repository that send tcp response is partly forked from milo2012/CVE-2018-13379 with some changes for APIs of...

pbscan

SUMMARY polarbearscan is an attempt to do faster and more efficient banner grabbing and port scanning. It combines two different ideas which hopefully will make it somewhat worthy of your attention and time. The first of these ideas is to use stateless SYN scanning using cryptographically protect...

nmap-scan-results

Nmap Scan: 200+ Vulnerabilities Found Critical: CVE-2023-38408 9.8, CVE-2024-38476 9.8, Slowloris DoS Full Report...

log4v-vuln-check

Log4JS File & Vulnerability Scanner + Local Port Bind Scanner This script is used to perform a fast check to see if your server is possibly affected by CVE-2021-44228 the log4j vulnerability. It does not provide 100% guarantee that you are not vulnerable, but it gives a hint if it is possible tha...

cloud-doctor

cloud-doctor One command grades your whole cloud account — misconfigurations, missing observability, and security posture, ranked by the five things to fix first. Point it at AWS, Cloudflare, Vercel, Supabase, Render, Fly.io, or Railway and it comes back with a score, what's broken, and a fix for...

CVE-2020-0796-Scanner

CVE-2020-0796-Scanner This PoC source: QiAnXin http://dl.qianxin.com/skylar6/CVE-2020-0796-Scanner.zip...

OnTheEdge

OnTheEdge OnTheEdge is a small Windows research PoC written in C for studying credential-related data that may be present in the memory of Microsoft Edge processes while the browser is running. The project provides two variants: Standalone executable — intended for local testing and research. BOF...

inspec-log4j

inspec-log4j This profile scans for vulnerable versions of Log4j Core JAR files directly on the file system, and embedded in WAR files. Running the profile locally git clone https://github.com/trickyearlobe/inspec-log4j inspec exec inspec-log4j Running the profile against a remote SSH target Ensu...

wp2shell-scan

wp2shell-scan A scanner and proof-of-concept toolkit for CVE-2026-63030 wp2shell, a pre-authenticated remote code execution vulnerability in WordPress core Features Two non-destructive detection methods: --check-type time-based SLEEP timing and --check-type error-based TRUE/FALSE/broken...