inspec_CVE-2016-5195

Inspec profile for detecting CVE-2016-5195 aka Dirty COW. This profile contains one control which executes steps detailed here to assess vulnerability. More information on Dirty COW and the script. Please note this test takes a few minutes to execute...

CVE-2023-35813

CVE-2023-35813 CVE-2023-35813 is a proof-of-concept used to determine if an instance of Sitecore is vulnerable by analyzing a server Response Header for modification. Made with love by heretic 3...

scan4secrets

scan4secrets DAST + SAST secret scanner with live verification, source-map parsing, and CI-native reporting plus a SAST vulnerability & misconfiguration engine. Find leaked credentials in source trees, running web apps, and CI logs. Verify them live against vendor APIs. Scan the same source trees...

CVE-2025-30208_POC

Scan without proxy python3 poc.py -f urls.txt Scan with proxy python3 poc.py -f urls.txt --proxy http://127.0.0.1:8080...

zairo

Measuring zairo zairo's unit tests check that it builds the right prompts and handles answers correctly. They can't tell you whether a model, given those prompts, finds a vulnerability a change introduced, or flags one that isn't there. That's what this directory is for: a set of labelled changes...

detectar_cve-2024-3094

Detectarcve-2024-3094...

Log4Shell-Scanner

Log4Shell-Scanner Python script to detect Log4Shell Vulnerability CVE-2021-44228...

CVE-2012-5321

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2012-5321 Run bellow command to check CVE-2012-5321 -h Configurations 2. We integrated with the Telegram API to receive...

CVE-2024-0235

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2024-0235 Run bellow command to check CVE-2024-0235 -h Configurations 2. We integrated with the Telegram API to receive...

CVE-2024-29973

CVE-2024-29973 Exploiter a Vulnerability detection and Exploitation tool for CVE-2024-29973 with Asychronous Performance. Installation: git clone https://github.com/RevoltSecurities/CVE-2024-29973 pip install -r requirements.txt python3 exploit.py --help Usage: python3 exploit.py -h / / / / / / /...

westone-CVE-2021-22986-scanner

westone-CVE-2021-22986-scanner...

CVE-2019-9670

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2019-9670 Run bellow command to check CVE-2019-9670 -h Configurations 2. We integrated with the Telegram API to receive...

Vlun-Agent-X

VulnAgent-X Research Prototype VulnAgent-X is a research-focused multi-agent prototype for bug and vulnerability detection. It takes a local repository or diff as input, and outputs structured findings, evidence chains, localization, confidence, and experiment logs. Core Capabilities Inputs: repo...

Detection-for-CVE-2017-2793

Detection-for-CVE-2017-2793...

nuclei-drupal-sa

nuclei-drupal-sa Nuclei templates for drupal vulns... far from perfect PR if you want stuff to change. How to use nuclei -t ./nuclei-drupal-sa/templates/ --target https://www.example.com...

struts-splunk

struts-splunk Vuln Apache Struts with splunk...

ms-msdt-vulnerability-pdq-package

ms-msdt-vulnerability-pdq-package You will need all of the files in order for the package to properly run "out of the box". If you do not have PDQ Inventory, Please remove the scan step from the package before running. This package now searches for the search-ms registry key in addition to the...

cq

cq Code Query, a universal code security scanning tool. CQ scans code for security vulnerabilities and other items of interest to security-focussed code reviewers. It outputs text files containing references to issues found, into an output directory. These output files can then be reviewed,...

qlcoder

QLCoder Agentic Framework for Synthesizing CodeQL Queries Table of Contents Overview Installation Docker Recommended Native Linux Usage Quick Start Development Tooling Examples Paper Environment Contributions Team Citation Affiliated Projects Overview QLCoder is a framework for using LLMs to...

WinFlesher

Like PingCastle went out for drinks with Bloodhound, and they actually decided to get some work done. 🍷 WinFlesher is an advanced attack surface security assessment framework designed to analyze, evaluate, and report on security postures, attack paths, and remediation strategies in complex...