161 matches found
CVE-Factory
CVE-Factory：规模化专家级智能体任务以应对代码安全漏洞 CVE-Factory 是一个多智能体（Multi-Agent）系统，用于实现完全自动化的端到端 CVE 复现。给定 CVE 记录后，系统会自动研究详细信息、生成测试用例、构建 Docker 环境，并验证每个漏洞既可利用也可被修补。该流水线无需人工干预即可将 CVE 元数据转换为可复现、可测试的漏洞环境。 ⚠️ 安全警告 ：本系统会构建并运行包含易受攻击软件的 Docker 容器。你必须 使用 Docker-in-Docker（DinD）环境 将 CVE 容器与宿主机系统隔离。切勿直接在宿主机的 Docker 守护进程上运行...
CVE-2008-1930
Guía de Documentación de Explotación CVE-2008-1930 Información del Documento Propósito: Documentación educativa y de evaluación de seguridad autorizada Vulnerabilidad: CVE-2008-1930 Audiencia: Analistas de Seguridad, Probadores de Penetración, Estudiantes Entorno: Laboratorio de Pruebas Controlad...
caido
Website • Dashboard • Docs • Roadmap • Branding • Discord 👋 Welcome Welcome to Caido! Caido aims to help security professionals and enthusiasts audit web applications with efficiency and ease. Here you can get involved with the development of our software. You can learn about upcoming Caido...
AERA
AERA: Autonomous Exploit Research Assistant !Python 3.11+...
mi-x
Am I Exploitable? 作者： 2022 - 至今, Rezilion 描述： 漏洞验证 开发： 2022年1月 - 至今 文档： 参见网站、README 介绍 描述 ‘Am I Exploitable?’ 是一个 Python 开源项目，旨在满足验证你的系统是否容易受到特定漏洞攻击的需求。 该项目可以帮助你了解自己是否容易受到某个特定漏洞的攻击，并说明系统中哪个组件存在漏洞、哪个组件不存在漏洞。 该项目可以根据我们执行的漏洞检查生成一张展示验证流程的图。 MI-X 支持机器可读输出。结果可以导出为三种不同的文件格式：json、csv 和 text。...
CVE-2017-5638
CVE-2017-5638 该脚本用于验证 Apache Struts 2 漏洞（CVE-2017-5638），又名 Struts-Shock。它完全无害，因为它不会注入任何恶意负载，仅注入一个名为 'STRUTS2-VALIDATION' 的 HTTP 请求头，以便能够验证目标是否易受攻击。 由于其多线程能力，它能够在不到 10 分钟内运行遍布全球的 2500 多个应用程序。因此，它在验证大型企业应用程序时非常方便。 cve-2017-5638 cve-2017-5638 易受攻击站点示例 该项目旨在展示 CVE-2017-5638 的利用方式，仅供教育目的。 更多信息，请参见...
ProofCMS-
ProofCMS ProofCMS is a modular Python toolkit for detecting c...
proofcms
ProofCMS ProofCMS is a modular Python toolkit for detecting c...
Exploit for Interpretation Conflict in Wordpress
CVE-2026-63030 | WP2Shell xpl0ited by gr1txhttps://gith...
AI_AutoExploitGeneration
🎯 AI-POWERED AUTOMATED EXPLOIT GENERATION AEG SYSTEM Vers...
gemini-bug-bounty
Gemini Bug Bounty Find security vulnerabilities, get paid...
V2E: Validating Smart Contract Vulnerabilities through Profit-Driven Exploit Generation and Execution
Smart contracts are a critical component of blockchain systems. Due to the large amount of digital assets carried by smart contracts, their security is of critical importance. Although numerous tools have been developed for detecting smart contract vulnerability, their effectiveness remains...
The Face of Penetration Testing is Changing: Announcing Metasploit Pro 5.0.0
The role and demand for red-teaming capabilities are growing, as more exploitable CVEs make their way into criminal hands. Being proactive is no longer a capability that can be reserved for annual tests, but a continuous assessment to determine exposure and even through the validation of an...
poc_framework
pocframework A framework for vul...
Cyber Threat Exposure Management: A 5-Step Guide
Attackers don’t care about your long list of CVEs. They look for the path of least resistance to your most valuable assets. So, why are we still managing security from a defender’s checklist instead of an attacker’s playbook? A modern security program needs to see the entire attack surface throug...
GAPS: Guiding Dynamic Android Analysis with Static Path Synthesis
Dynamically resolving method reachability in Android applications remains a critical and largely unsolved problem. Despite notable advancements in GUI testing and static call graph construction, current tools are insufficient for reliably driving execution toward specific target methods, especial...
aether
Aether - Adaptive Exploit & Threat Hunting Engine for EVM-base...
EUVD-2021-34656
In the Linux kernel, the following vulnerability has been resolved: udmabuf: validate ubuf-pagecount Syzbot has reported GPF in sgallocappendtablefrompages. The problem was in ubuf-pages == ZEROPTR. ubuf-pagecount is calculated from arguments passed from user-space. If user creates udmabuf with...