vulnerability

Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.

Recent CVE PoC & reproduction scripts. Focused on high-severity vulnerabilities across Linux kernel, Windows, macOS and more.

A Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner

scalpel是一款命令行漏洞扫描工具，支持深度参数注入，拥有一个强大的数据解析和变异算法，可以将常见的数据格式（json, xml, form等）解析为树结构，然后根据poc中的规则，对树进行变异，包括对叶子节点和树结构 的变异。变异完成之后，将树结构还原为原始的数据格式。

TOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things

An example C program which contains vulnerable code for common types of vulnerabilities. It can be used to show fuzzing concepts.

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain

Nacos 综合漏洞利用工具

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

SmartBugs: A Framework to Analyze Ethereum Smart Contracts

Panthera(P.)uncia - Official CLI utility for Subdomain Center & Exploit Observer.

汽车/安卓/固件/代码安全测试工具集

Securify v2.0

Modern image vulnerability scanning & patching platform with multi-tool integration.

Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.

Jie stands out as a comprehensive security assessment and exploitation tool meticulously crafted for web applications. Its robust suite of features encompasses vulnerability scanning, information gathering, and exploitation, elevating it to an indispensable toolkit for both security professionals and penetration testers. 挖洞辅助工具(漏洞扫描、信息收集)

A Terminal UI for browsing security vulnerabilities (CVEs)

Awesome Writeups and POCs

Escalation of Privilege to the root through sudo binary with chroot option. CVE-2025-32463

Detect, analyze and uniquely identify crashes in Windows applications

CVE-2026-9830 Proof of Concept