A very vulnerable web site written in NodeJS with the purpose of have a project with identified vulnerabilities to test the quality of security analyzers tools tools

✭ 282

javascript nodejs vulnerability analyzer

Faraday

Faraday introduces a new concept - IPE (Integrated Penetration-Test Environment) a multiuser Penetration test IDE. Designed for distributing, indexing, and analyzing the data generated during a security audit.

Application Security Engineer Interview Questions

Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer

✭ 267

infosec interview-questions vulnerability xss devsecops appsec application-security websecurity

Droid Hunter

(deprecated) Android application vulnerability analysis and Android pentest tool

✭ 256

ruby android security hacking scanner vulnerability

Shiro exploit

Apache Shiro 反序列化漏洞检测与利用工具

✭ 252

python crypto exploit vulnerability shiro vulnerability-scanners

Hacker101

Source code for Hacker101.com - a free online web and mobile security class.

✭ 12,246

SCSS HTML javascript shell ruby security hacking education xss web-security sql-injection csrf vulnerability mobile-security clickjacking hackerone session-fixation hacker101 unchecked-redirects

Springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

✭ 3,196

java python HTML springboot springcloud rce vulnerability springboot-actuator-rce spring-boot-vulnerability spring-vulnerability spring-actuator-vulnerability

SQL-XSS

A few SQL and XSS attack tools

✭ 29

python sql hacking xss fuzzing vulnerability payload xss-attacks sql-xss

klustair

(Deprecated) Submit all images in your Kubernetes cluster to Anchore for a vulnerability check and check your configuration with kubeaudit

✭ 15

python Dockerfile shell kubernetes security kubernetes-cluster vulnerability vulnerability-scanners

XSS-Cheatsheet

XSS Cheatsheet - A collection of XSS attack vectors https://xss.devwerks.net/

✭ 26

javascript HTML CSS security html5 xss vulnerability xss-vulnerability

mondoo

🕵️‍♀️ Mondoo Cloud-Native Security & Vulnerability Risk Management

✭ 60

shell powershell Makefile Dockerfile security scanner container vulnerability cloud-native

waithax

An implementation of the waithax / slowhax 3DS Kernel11 exploit.

✭ 64

c Makefile assembly C++homebrew vulnerability

NSE-scripts

NSE scripts to detect CVE-2020-1350 SIGRED and CVE-2020-0796 SMBGHOST, CVE-2021-21972, proxyshell, CVE-2021-34473

✭ 105

lua scanner nmap poc vulnerability vulnerability-detection vcenter nmap-scripts nmap-scan-script nse-script smbv3 smbghost sigred cve-2020-1350 cve-2021-21972 proxyshell cve-2021-34473

xsymlink

Xbox One Symbolic Link Exploit: Access restricted/encrypted volumes using the Xbox File Explorer.

✭ 18

C#exploit symbolic-links reverse-engineering xbox vulnerability

Exploits

Real world and CTFs exploiting web/binary POCs.

✭ 69

python shell exploit vulnerability pwn scada pwned exploit-code scada-security scada-exploitation

log4jscanwin

Log4j Vulnerability Scanner for Windows

✭ 142

c C++assembly Ada pascal C#security log4j scanner vulnerability cve security-tools cve-2021-44228 log4shell cve-2021-45046 cve-2021-4104 cve-2021-45105 cve-2021-44832

external-protocol-flooding

Scheme flooding vulnerability: how it works and why it is a threat to anonymous browsing

✭ 603

typescript CSS javascript HTML Dockerfile security privacy exploit identification vulnerability fingerprinting browser-fingerprinting

Chimay-Red-tiny

This is a minified exploit for mikrotik routers. It does not require any aditional modules to run.

✭ 25

python mikrotik exploit vulnerability wikileaks mikrotik-router chimay-red

SQL Injection Payload

SQL Injection Payload List

✭ 62

sql database exploit dbms injection vulnerability vulnerability-detection payload vulnerability-management vulnerability-scanners sql-commands sqlinjection sql-injection-attacks sql-injection-payload

fuzzing-corpus

My fuzzing corpus

✭ 120

javascript ruby HTML assembly c Rich Text Format corpus file-format fuzzing vulnerability testsuite

Detect-CVE-2017-15361-TPM

Detects Windows and Linux systems with enabled Trusted Platform Modules (TPM) vulnerable to CVE-2017-15361. #nsacyber

✭ 34

powershell shell rsa audit vulnerability cve nessus tpm trusted-platform-module

log4shell-finder

Fastest filesystem scanner for log4shell (CVE-2021-44228, CVE-2021-45046) and other vulnerable (CVE-2017-5645, CVE-2019-17571, CVE-2022-23305, CVE-2022-23307 ... ) instances of log4j library. Excellent performance and low memory footprint.

✭ 22

python security log4j scanner vulnerability log4j2 cve-2019-17571 cve-2021-44228 log4shell cve-2021-45046 cve-2021-4104 cve-2021-42550 cve-2021-45105 cve-2021-44832 cve-2017-5645 cve-2022-23305 cve-2022-23307 cve-2022-23302 cve-2020-9488

Pentesting

Misc. Public Reports of Penetration Testing and Security Audits.

✭ 24

security security-audit exploit poc vulnerability infosec pentesting security-vulnerability bugbounty pentest infosec-reference infosec-guideline

lachesis

👨‍💻 A work-in-progress web services mass scanner written in Rust

✭ 55

rust javascript HTML webservice scanner vulnerability mass masscan

CVE-2021-33766

ProxyToken (CVE-2021-33766) : An Authentication Bypass in Microsoft Exchange Server POC exploit

✭ 37

shell microsoft exploit exchange poc vulnerability exchange-server cve-2021-33766 proxytoken

SecExample

JAVA 漏洞靶场 (Vulnerability Environment For Java)

✭ 228

HTML java Dockerfile docker cors rce vulnerability csrf xss-vulnerability springboot fastjson ssrf sqlinjection

Understanding Linux Kernel Vulnerability

✭ 21

c Makefile linux kernel vulnerability

PastebinMarkdownXSS

XSS in pastebin.com and reddit.com via unsanitized markdown output

✭ 84

security pastebin xss vulnerability infosec pentesting bugbounty

TORhunter

Designed to scan and exploit vulnerabilities within Tor hidden services. TORhunter allows most tools to work as normal while resolving .onion

✭ 47

shell c tor hacking vulnerability onion termux kali-linux hacking-tool vulnerability-scanners deepweb hacking-tools termux-tool termux-hacking

APSoft-Web-Scanner-v2

Powerful dork searcher and vulnerability scanner for windows platform

✭ 96

C#crawler automation sql exploit hacking xss smartthings vulnerability crawlers scrapper xss-detection scanners dork lfi lfi-detection

SpringBootExploit

项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。

✭ 1,060

java spring exploit vulnerability springboot exp vul

web-fuzz-wordlists

Common Web Managers Fuzz Wordlists

✭ 137

web hacking web-application penetration-testing phpmyadmin vulnerability adminer pentest payloads web-manager

exploit

My exploitDB.

✭ 16

python exploit vulnerability

browserrecon-php

Advanced Web Browser Fingerprinting

✭ 29

PHP browser exploit fingerprint vulnerability security-vulnerability fingerprinting exploitation vulnerability-detection vulnerability-identification vulnerability-scanners

attack-surface-detector-zap

The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters

✭ 52

java security vulnerability pentesting dast

python-sdk

Python SDK to access the vulnerability database

✭ 22

python shell database vulnerability

reconmap

Vulnerability assessment and penetration testing automation and reporting platform for teams.

✭ 242

javascript security hacking penetration-testing bug-bounty vulnerability infosec pentesting vulnerability-management security-automation devsecops collaboration-platform

smartbugs

SmartBugs: A Framework to Analyze Solidity Smart Contracts

✭ 222

solidity python shell blockchain vulnerability

firmeye

IoT固件漏洞挖掘工具

✭ 133

python iot ida vulnerability

vulnerablecode

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

✭ 269

python HTML CSS Nix Makefile shell Dockerfile security vulnerability vulnerability-databases vulndb cve vulnerability-detection vulnerability-identification vulnerability-scanners security-tools vulnerability-database

Find-PHP-Vulnerabilities

🐛 A plug-in of sublime 2/3 which is able to find PHP vulnerabilities

✭ 57

python PHP sublime vulnerability web-security sublime-text-plugin code-audit

CVE-2021-31728

vulnerability in zam64.sys, zam32.sys allowing ring 0 code execution. CVE-2021-31727 and CVE-2021-31728 public reference.

✭ 63

c vulnerability cve-2021-31727 cve-2021-31728

hacking-resources

Hacking resources and cheat sheets. References, tools, scripts, tutorials, and other resources that help offensive and defensive security professionals.

✭ 1,386

osint tools malware hacking network-monitoring vulnerability hacker gathering social-engineering ethicalhacking

awesome-log4shell

An Awesome List of Log4Shell resources to help you stay informed and secure! 🔒

✭ 194

security awesome log4j vulnerability awesome-list log4shell

vulnerability-lab

漏洞研究

✭ 379

security research vulnerability cve

Android-LDoS

No description or website provided.