heartthreader

Heartthreader Because manual vulnerability testing is tiresome. Just add some magic multithreading sauce!...

redash-vulnerable

redash-vulnerable 🐛 A Dockerized Redash instance that is vulnerable to CVE-2021-21239 as written about by Calif. Usage 💻 Starting the server preserving data script/server This will start the Redash server using Docker Compose in detached mode, preserving any existing data. The server will be...

llm-agent-testbed

🛡️ LLM Agent Security Testbed Empirical Vulnerability & Defense Harness for Tool-Calling LLM Agents A disciplined security testbed testing whether tool-equipped LLM agents can be manipulated into unauthorized data exfiltration via prompt injection, role-claim social engineering, and confused-deput...

CVE_Demo

CVEDemo Hi, This is Muhammad Navaid Zafar Ansari, I have created this repository to maintain my CVE demos and give the fix recommendation to those people who want to use these applications where I found the vulnerabilities. Disclaimer: All the demo's are created only for educational purpose, Do...

bleed

bleed bleed is a tool to test servers for the 'Heartbleed' vulnerability CVE-2014-0160. Usage $ bleed example.org Connecting... Sending Client Hello Waiting for Server Hello... Sending Heartbeat request Unexpected EOF receiving record header. Server closed connection. No heartbeat response. Serve...

apache-vulnerability-testing

Apache HTTP Server 취약점 테스트 도구 이 저장소는 Apache HTTP Server의 다양한 취약점파일명 혼동 공격, SSRF, 서비스 거부Denial of Service 및 최근 CVE와 관련된 기타 취약점을 테스트하기 위한 개념 증명PoC 을 제공합니다. 이 도구는 서버가 특정 유형의 공격에 취약한지 평가하기 위해 조작된 HTTP 요청을 전송합니다. 기능 다음을 포함한 여러 취약점 테스트: CVE-2024-38472 : Windows UNC SSRF를 통한 Apache HTTP Server...

test-vuln

test-vuln a controlled environment to test CVE-2025-55182...

vulhub-apache

This repository does not have a README...

ExchangeWeaknessTest

ExchangeWeaknessTest This script test the CVE-2021-26855 vulnerability on Exchange Server. Example python3 ExchangeWeaknessTest.py mydomain.com Licence Licensed under the GPL, version 3...

dnspython

dnspython INTRODUCTION dnspython is a DNS toolkit for Python. It supports almost all record types. It can be used for queries, zone transfers, and dynamic updates. It supports TSIG-authenticated messages and EDNS0. dnspython provides both high- and low-level access to DNS. The high-level classes...

akto v2.32.5

Akto.io API Security Contributors What is Akto? How it works • Getting-Started • API Inventory • API testing • Add Test • Join Discord community • Akto is an instant, open source API security platform that takes only 60 secs to get started. Akto is used by security teams to maintain a continuous...

cam-hunter

📡 CAM HUNTER — Advanced DVR / NVR / XVR Security Testing Frame...

Exploit for Code Injection in Vmware Spring_Framework

Spring4Shell Local Exploitation Conditions Verification, Remed...

websec-skills

websec-skills Web Security Vulnerability Testing Skills Set,...

Exploit for Improper Input Validation in Paloaltonetworks Pan-Os

CVE-2024-3400 This program was improved upon to include a safe...

Hunting-Bugs

2026 Practical Bug Bounty Guide Built on real-world experie...

Luban-2040-v2

🛡️ Luban 2040 v2 Advanced Reconnaissance & Vulnerability...

Exploit for CVE-2020-1938

Tomcat Ghostcat CVE-2020-1938 / CNVD-2020-10487 Vulnerabilit...

Exploit for CVE-2026-31431

This script is entirely genera...

API Security Testing and Vulnerability Assessment

APIs now carry more sensitive data than traditional web interfaces. Payment details, health records, authentication tokens, and customer databases all flow through API endpoints that attackers can probe without ever touching a browser. A single misconfigured endpoint can expose millions of record...