1978 matches found
DorkNet
DorkNet Selenium powered Python script to automate searching the web for vulnerable applications. DorkNet can take a single dork or a list of dorks as arguments. After the proper command line arguments have been passed, the script will use Selenium and Geckodriver to find the results we want and...
Above
Above Network security sniffer for finding vulnerabilities in the network. Designed for pentesters and security engineers. root@kitploit: / | / / / /| | / / \ | / / \ / |/ // / // / |/ / / // |/.//|// Above: Network Security Sniffer Developer: Mahama Bazarov Caster Contact:...
SCANNER-INURLBR
Desription Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found. A PHP tool that can run on different Linux distributions helps hackers and security professionals with...
CakeFuzzer
CakeFuzzer Latest release : 1.0 License : GNU GPL v3.0 Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives. Currently it is implemented to support the Cake...
Firmware_Slap
Firmware Slap Firmware slap combines concolic analysis with function clustering for vulnerability discovery and function similarity in firmware. Firmware slap is built as a series of libraries and exports most information as either pickles or JSON for integration with other tools. Slides from the...
aegisgraph
AegisGraph — Engineering Platform Graph-driven automated vulnerability discovery for secure messaging applications. 577 Industries' engineering implementation for DARPA SBIR Direct-to-Phase-II topic HR0011SB20254-12 ASEMA. -blue Looking for evaluator-facing artifacts? The sanitized public...
security-audit-skill
security-audit A coding-agent skill that turns your agent into a security auditor. It orchestrates multiple parallel agents through a six-phase pipeline -- recon, hunting, validation, reporting, structured output, and independent verification -- to find exploitable vulnerabilities with real impac...
cerebro-red-v2
CEREBRO-RED v2 Research Edition Autonomous Local LLM Red Teaming Suite A research-grade framework for automated vulnerability discovery in local LLMs using Agentic Fuzzing and Adaptive Adversarial Mutation AAM. Research Goals Implement PAIR Algorithm Prompt Automatic Iterative Refinement from...
SWE-agent
!warning Most of our current development effort is on mini-swe-agent, which has superseded SWE-agent. It matches the performance performance of SWE-agent, while being much simpler. See the FAQ for more details about the differences. Our general recommendation is to use mini-SWE-agent instead of...
DeepAudit
DeepAudit - Your AI Security Audit Team, Making Vulnerability Discovery Accessible...
redai
RedAI A terminal workbench for AI-driven vulnerability discovery and live validation. Most "AI security" tools stop at flagging code that looks vulnerable. RedAI goes further: after scanner agents produce candidate findings, validator agents work inside a live environment — a running instance of...
dorkscout
dorkscout dokrscout is a tool to automate the finding of vulnerable applications or secret files around the internet throught google searches, dorkscout first starts by fetching the dorks lists from https://www.exploit-db.com/google-hacking-database and then it scans a given target or everything ...
Callisto
Callisto An Intelligent Automated Binary Vulnerability Analysis Tool Demo: Callisto is an intelligent automated binary vulnerability analysis tool. Its purpose is to autonomously decompile a provided binary and iterate through the psuedo code output looking for potential security vulnerabilities ...
aixcc-afc-atlantis
Atlantis 本仓库包含 Atlantis ，即 Team Atlanta 提交至 AIxCC 决赛（AFC）的 Cyber Reasoning System（CRS）。 Atlantis 旨在自动发现和分析软件系统中的漏洞。 主要系统实现位于 example-crs-webservice 目录中。 快速开始 要部署和运行 Atlantis CRS 系统，请参阅 example-crs-architecture 目录中的文档。 仓库结构 example-crs-webservice/ - 主要的 Atlantis CRS 实现 example-crs-architecture/ -...
defending-code-reference-harness
防御代码参考框架 一个基于我们与多个组织的安全团队合作的经验，使用 Claude 进行自主漏洞发现与修复的参考实现。关于这些经验及最佳实践的详细说明，请参阅随附博客文章（也可在 blog-post.md 中找到）。如需仅使用 SDK 的轻量级相同 recon → find → triage → report → patch 循环指南，请参阅配套食谱。 本仓库不被维护且不接受贡献。 🔒 需要托管方案？ Anthropic 提供 Claude Security，一个托管产品， 可在多个项目中查找并修复源代码中的漏洞。Claude Security 扫描您的仓库以发现漏洞，...
Complete-google-dorks
Complete-google-sql-dorks news/news.php?id= -site:php.net -"The PHP Group" inurl:source inurl:url ext:pHp !Host=. intext:encUserPassword= ext:pcf ?action= ?cat= ?id= ?intitle:index.of? mp3 artist-name-here ?intitle:index.of? mp3 name ?page= ?pagerequested= ?pid= " -FrontPage-" ext:pwd inurl:servi...
MATE
MATE MATE is a suite of tools for interactive program analysis with a focus on hunting for bugs in C and C++ code. MATE unifies application-specific and low-level vulnerability analysis using code property graphs CPGs, enabling the discovery of highly application-specific vulnerabilities that...
OpenAnt
OpenAnt Knostic 出品的 OpenAnt 是一款基于 LLM 的开源漏洞发现产品，可帮助防御者主动发现经验证的安全缺陷，同时最大限度地减少误报和漏报。第一阶段负责检测。第二阶段负责攻击。能存活下来的才是真实漏洞。 我们对此产品相当自豪，目前正在就其发现走漏洞披露流程。但请记住，这最初是一个研究项目，部分功能仍处于测试阶段。我们欢迎贡献，让它变得更好。 为什么开源？ 考虑到 AI 发现的漏洞呈爆炸式增长，我们希望 OpenAnt 能成为帮助开源维护者领先于攻击者的工具——他们可以自己使用它，也可以免费提交自己的仓库进行扫描。 此外，由于 Knostic...
Dorkify
Perform Google Dork search with Dorkify Google Dorking Google dorking is a hacker technique that uses Google Search to find security holes in the configuration and computer code that websites use. Google Dorking involves using advanced operators in the Google search engine to locate specific...