655 Open source projects that are alternatives of or similar to Vfeed

PatrowlHears - Vulnerability Intelligence Center / Exploits

With the hope that someone finds the data useful, we periodically publish an archive of almost all of the non-sensitive vulnerability information in our vulnerability reports database. See also https://github.com/CERTCC/Vulnerability-Data-Archive-Tools

Arissploit Framework is a simple framework designed to master penetration testing tools. Arissploit Framework offers simple structure, basic CLI, and useful features for learning and developing penetration testing tools.

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer security personnel, complicated business lines, difficult periodic inspection and low automation to better achieve internal safety management.

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

Advanced Web Browser Fingerprinting

CVE-2019-8449 Exploit for Jira v2.1 - v8.3.4

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

Awesome CSIRT is an curated list of links and resources in security and CSIRT daily activities.

Faraday introduces a new concept - IPE (Integrated Penetration-Test Environment) a multiuser Penetration test IDE. Designed for distributing, indexing, and analyzing the data generated during a security audit.

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

Open Vulnerability Assessment Scanner - Scanner for Greenbone Vulnerability Management (GVM)

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

Tool for information gathering, IPReverse, AdminFInder, DNS, WHOIS, SQLi Scanner with google.

Docker Scan is a Command Line Interface to run vulnerability detection on your Dockerfiles and Docker images

Vulners Python API wrapper

Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.

Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues

Advanced vulnerability scanning with Nmap NSE

SQL Injection Payload List

CLI tool for open source and threat intelligence

Some personal exploits/pocs

OpenSSH 2.3 up to 7.4 Mass Username Enumeration (CVE-2018-15473).

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

一些漏洞分析

A simple threat hunting tool based on osquery, Salt Open and Cymon API

ES File Explorer Open Port Vulnerability - CVE-2019-6447

Vulnerability database and package search for sources such as OSV, NVD, GitHub and npm.

🔪Browser logic vulnerabilities ☠️

A collection of my public security advisories.

A collection of my quick and dirty scripts for vulnerability POC and detections

#INFILTRATE20 raptor's party pack

Extensible framework for analyzing publicly available information about vulnerabilities

YAFRA is a semi-automated framework for analyzing and representing reports about IT Security incidents.

Port of "DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers" to Clang/LLVM 10 and Linux Kernel

Threat research and reporting from IronNet's Threat Research Teams

Designed to scan and exploit vulnerabilities within Tor hidden services. TORhunter allows most tools to work as normal while resolving .onion

Repositório criado com intuito de reunir informações, fontes(websites/portais) e tricks de OSINT dentro do contexto Brasil.

Aggregated Indicators of Compromise collected and cross-verified from multiple open and community-supported sources, enriched and ranked using our intelligence platform for you. Threat Intelligence, Threat feed, Open source feed.

Detects Windows and Linux systems with enabled Trusted Platform Modules (TPM) vulnerable to CVE-2017-15361. #nsacyber

A collection of curated Java Deserialization Exploits

hack tools

Defund the Police.

漏洞研究

Best practices in threat intelligence

Python 3 Wrapper for the BinaryEdge API https://www.binaryedge.io/

红队综合渗透框架

A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.

(Deprecated) Submit all images in your Kubernetes cluster to Anchore for a vulnerability check and check your configuration with kubeaudit

Master list of all my vulnerability discoveries. Mostly 3rd party kernel drivers.

vulscan 扫描系统：最新的poc&exp漏洞扫描，redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...

NSE scripts to detect CVE-2020-1350 SIGRED and CVE-2020-0796 SMBGHOST, CVE-2021-21972, proxyshell, CVE-2021-34473

Apache Shiro 反序列化漏洞检测与利用工具

StalkPhish - The Phishing kits stalker, harvesting phishing kits for investigations.

NERVE Continuous Vulnerability Scanner

Defanged Indicator of Compromise (IOC) Extractor.

Log4j Vulnerability Scanner for Windows

Documentation and Sharing Repository for ThreatPinch Lookup Chrome & Firefox Extension