66 Open source projects that are alternatives of or similar to Meltdown

This repository for training application security.

WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middleware. This is a Remote Code Execution vulnerability.

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

FPGA-based LPC bus sniffing tool for Lattice iCEstick Evaluation Kit

🔐 Security advisories as a simple composer exclusion list, updated daily

Watchdog - A Comprehensive Security Scanning and a Vulnerability Management Tool.

CVE-2017-5693 Denial of service vulnerability in Puma 6 modems

Automatic SQL injection with Charles and sqlmap api

mirror of gera's insecure programming examples | http://community.coresecurity.com/~gera/InsecureProgramming/

EKOLABS esta dedicada para investigadores independientes y para la comunidad del Software Libre. Vamos a proveer de stands completos con monitor, alimentacion de energia y acceso a internet por cable, y vos vas a traer tu maquina para mostrar tu trabajo y responder preguntas de los participantes de Ekoparty Security Conference

Proof-of-concept of emotion-targeted content delivery using machine learning and ARKit.

Checklist of security precautions for Ruby on Rails applications.

Identify vulnerabilities in running containers, images, hosts and repositories

Red Hat Dependency Analytics extension

Exploit Pack -The next generation exploit framework

bWAPP latest modified for PHP7

syzkaller is an unsupervised coverage-guided kernel fuzzer

The official PHP SDK for Shieldfy

A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Latest guides, tools, methodology, platforms tips, and tricks curated by us.

Vilicus is an open source tool that orchestrates security scans of container images(docker/oci) and centralizes all results into a database for further analysis and metrics.

Subdomain takeover vulnerability checker

Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

Exploit management framework

RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins!

Website Security, Antivirus & Firewall || a powerful application that can secure your website against hackers, attacks and other incidents of abuse

Contains Attack labs

A tool to update your project's dependencies on GitHub. Runs on pyup.io, comes with a command line interface.

Bento Toolkit is a minimal fedora-based container for penetration tests and CTF with the sweet addition of GUI applications.

A static analysis security vulnerability scanner for Ruby on Rails applications

Free and open source Manga CMS (Deprecated!)

Tracking CVEs for the linux Kernel

IBM Maximo Asset Management is vulnerable to Information Disclosure via XXE Vulnerability (CVE-2020-4463)

Mikrotik RouterOS (6.x < 6.38.5) exploit kit. Reverse engineered from the "Vault 7" WikiLeaks publication.

Tool for scan vulnerabilities in Moodle platforms

Find interesting and potentially hazardous commits in git projects

A tool to monitor local network traffic for possible security vulnerabilities. Warns user against possible nmap scans, Nikto scans, credentials sent in-the-clear, and shellshock attacks. Currently supports live monitoring and network capture (pcap) scanning.

Example of using revealed "Spectre" exploit (CVE-2017-5753 and CVE-2017-5715)

Some of my public exploits

SSL and TLS protocol test suite and fuzzer

Command-line tool for generating recovery codes for Hikvision IP Cameras

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Vulnogram is a tool for creating and editing CVE information in CVE JSON format

ROPium is a tool that helps you building ROP exploits by finding and chaining gadgets together

Static code analysis tool based on Elasticsearch

🎯 Command Injection Payload List

HackerOne "in scope" domains

Plugin to block compilation when unapproved dependencies are used or code styling does not comply.

☠️ Call of Duty - Vulnerabilities and proof-of-concepts

Safety checks your installed dependencies for known security vulnerabilities

Recsech is a tool for doing Footprinting and Reconnaissance on the target web. Recsech collects information such as DNS Information, Sub Domains, HoneySpot Detected, Subdomain takeovers, Reconnaissance On Github and much more you can see in Features in tools .

Misc. Public Reports of Penetration Testing and Security Audits.

The project is using laravel 5.4 and adminlte

Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem

Advanced Web Browser Fingerprinting

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

🚗Uber, at your fingertips

Open-Source Security Architecture | 开源安全架构

hacker, ready for more of our story ! 🚀

Laravel Package Skeleton Generator - https://youtu.be/kQRQWzDEbGk