vulnerability

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

一个高价值漏洞采集与推送服务 | Collect valueable vulnerabilities and push them to various services

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

Search and download public exploits from the Vulners database — online, or fully offline from a local SQLite FTS5 index.

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

Appshark is a static taint analysis platform to scan vulnerabilities in an Android app.

Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practising GraphQL Security.

🧵 CLI tool for directly patching container images!

GUAC aggregates software security metadata into a high fidelity graph database.

HummerRisk 是云原生安全平台，包括混合云安全治理和云原生安全检测。

Burp Suite Certified Practitioner Exam Study

Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities

Search 82,000+ public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub.

A DNS rebinding attack framework.

secator - the pentester's swiss knife

80k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒

hack tools

Steal Net-NTLM Hash using Bad-PDF

This repository contains a simple vulnerability scanner for the Terrapin attack present in the paper "Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number Manipulation".

A laboratory for learning secure web and mobile development in a practical manner.

Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance through execution and reporting. With built-in command automation, output parsing, and AI‑assisted summaries, it delivers faster, more structured, and high‑quality security assessments.

一个开源的、开箱即用的漏洞批量验证框架

These are my checklists which I use during my hunting.

Guidance for the Spectre, Meltdown, Speculative Store Bypass, Rogue System Register Read, Lazy FP State Restore, Bounds Check Bypass Store, TLBleed, and L1TF/Foreshadow vulnerabilities as well as general hardware and firmware security guidance. #nsacyber

Vulnerability (CVE) scanner for Nix/NixOS [maintainer=@henrirosten]

:: Prism X · Automated Enterprise Network Security Risk Detection and Vulnerability Scanning Tool / 棱镜 X · 自动化企业网络安全风险检测、漏洞扫描工具

Proofs-of-concept

The useful exploit finder

CVE-2026-24061 exploit PoC

An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.