224 Open source projects that are alternatives of or similar to Opencve

This tool scans for a number of common, vulnerable components (openssl, libpng, libxml2, expat and a few others) to let you know if your system includes common libraries with known vulnerabilities.

Bug's feed is a local hosted portal where you can search for the latest news, videos, CVEs, vulnerabilities...

聚合Github上已有的Poc或者Exp，CVE信息来自CVE官网。Auto Collect Poc Or Exp from Github by CVE ID.

SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs). 🌈

cve-search - a tool to perform local searches for known vulnerabilities

A Common Weakness Enumeration (CWE) Node.js SDK compliant with MITRE / CAPEC

Hourly updated database of exploit and exploitation reports

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞利用功能

A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.

PatrowlHears - Vulnerability Intelligence Center / Exploits

cvebase is a community-driven vulnerability data platform to discover the world's top security researchers and their latest disclosed vulnerabilities & PoCs

Multi source CVE/exploit parser.

This repository contains writeups for various CTFs I've participated in (Including Hack The Box).

Vulnerability (CVE) scanner for Nix/NixOS.

Open-Source Vulnerability Intelligence Center - Unified source of vulnerability, exploit and threat Intelligence feeds

快速搭建各种漏洞环境(Various vulnerability environment)

Log4j Vulnerability Scanner for Windows

Snyk CLI scans and monitors your projects for security vulnerabilities.

List of every possible vulnerabilities in computer security.

log4j2 remote code execution or IP leakage exploit (with examples)

Secure, Unified, Powerful and Extensible Rust Android Analyzer

Faraday introduces a new concept - IPE (Integrated Penetration-Test Environment) a multiuser Penetration test IDE. Designed for distributing, indexing, and analyzing the data generated during a security audit.

Detects Windows and Linux systems with enabled Trusted Platform Modules (TPM) vulnerable to CVE-2017-15361. #nsacyber

异步漏洞利用框架

Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative)

No description or website provided.

Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps. 👻🐚

BootStomp: a bootloader vulnerability finder

Check linux sources dump for known CVEs.

Snyk's public vulnerability database

PHDays Online CTF 2017. Developed with ♥ by Hackerdom team

An small overview of known Android vulnerabilities

🎩 [penetration testing Book], Kali Magic, Cryptography, Hash Crack, Botnet, Rootkit, Malware, Spyware, Python, Go, C|EH.

WEB SERVICE SECURITY ASSESSMENT TOOL

AutoVAS is an automated vulnerability analysis system with a deep learning approach.

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

Multithreaded Plugin based vulnerability scanner for mass detection of web-based applications vulnerabilities

This repository is a collection of resources to prepare for the Certified Kubernetes Security Specialist (CKSS) exam.

OWSAP Damn Vulnerable Web Sockets (DVWS) is a vulnerable web application which works on web sockets for client-server communication.

Making CoreOS' Clair easily work in CI/CD pipelines

🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks

Выпускная квалификационная работа (ВКР) магистра в LaTeX, оформленная в соответствии с нормоконтролем Севастопольского государственного университета в 2017 г.

A vulnerability scanner for container images and filesystems

Tracking CVEs for the linux Kernel

Integrates Dependency-Check reports into SonarQube

Documentation and Sharing Repository for ThreatPinch Lookup Chrome & Firefox Extension

Advisories and Proofs of Concept by BlackArrow

Hunt for security weaknesses in Kubernetes clusters

Public Disclosures

An iOS Security assessment app for jailbroken iOS Devices.

A list of web application security

A PHP version scanner for reporting possible vulnerabilities

Kubernetes Native, Runtime Container Image Scanning

NVD/CVE as JSON files

Master list of all my vulnerability discoveries. Mostly 3rd party kernel drivers.

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

A vulnerability fuzzing tool written in bash, it contains the most commonly used tools to perform vulnerability scan

WebMap-Nmap Web Dashboard and Reporting

A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.

A Docker Image For the Open Vulnerability Assessment Scanner (OpenVAS)