445 Open source projects that are alternatives of or similar to vulnerablecode

Advanced vulnerability scanning with Nmap NSE

The Correlated CVE Vulnerability And Threat Intelligence Database API

Advanced Web Browser Fingerprinting

Tool for information gathering, IPReverse, AdminFInder, DNS, WHOIS, SQLi Scanner with google.

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

Docker Scan is a Command Line Interface to run vulnerability detection on your Dockerfiles and Docker images

Faraday introduces a new concept - IPE (Integrated Penetration-Test Environment) a multiuser Penetration test IDE. Designed for distributing, indexing, and analyzing the data generated during a security audit.

Vulnerability database and package search for sources such as OSV, NVD, GitHub and npm.

Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues

Open Vulnerability Assessment Scanner - Scanner for Greenbone Vulnerability Management (GVM)

Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.

SQL Injection Payload List

Arissploit Framework is a simple framework designed to master penetration testing tools. Arissploit Framework offers simple structure, basic CLI, and useful features for learning and developing penetration testing tools.

A collection of my quick and dirty scripts for vulnerability POC and detections

Guidance for the Spectre, Meltdown, Speculative Store Bypass, Rogue System Register Read, Lazy FP State Restore, Bounds Check Bypass Store, TLBleed, and L1TF/Foreshadow vulnerabilities as well as general hardware and firmware security guidance. #nsacyber

vulscan 扫描系统：最新的poc&exp漏洞扫描，redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...

ES File Explorer Open Port Vulnerability - CVE-2019-6447

Vulners Python API wrapper

hack tools

SQL Vulnerability Scanner

Vulnerability Labs for security analysis

vulnx 🕷️ is an intelligent bot auto shell injector that detect vulnerabilities in multiple types of cms { `wordpress , joomla , drupal , prestashop .. `}

一些漏洞分析

Social Network Tabs Wordpress Plugin Vulnerability - CVE-2018-20555

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

With the hope that someone finds the data useful, we periodically publish an archive of almost all of the non-sensitive vulnerability information in our vulnerability reports database. See also https://github.com/CERTCC/Vulnerability-Data-Archive-Tools

Port of "DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers" to Clang/LLVM 10 and Linux Kernel

漏洞研究

A collection of my public security advisories.

Extensible framework for analyzing publicly available information about vulnerabilities

hacker, ready for more of our story ! 🚀

iblessing is an iOS security exploiting toolkit, it mainly includes application information collection, static analysis and dynamic analysis. It can be used for reverse engineering, binary analysis and vulnerability mining.

🔪Browser logic vulnerabilities ☠️

Vulnerability (CVE) scanner for Nix/NixOS.

OpenSSH 2.3 up to 7.4 Mass Username Enumeration (CVE-2018-15473).

Exploiting Edge's read:// urlhandler

Poc Collected for study and develop

CVE-2019-8449 Exploit for Jira v2.1 - v8.3.4

A collection of JavaScript engine CVEs with PoCs

The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebases using a variety of static analysis security testing (SAST) tools and generate reports to evaluate those tools.

Ary 是一个集成类工具，主要用于调用各种安全工具，从而形成便捷的一键式渗透。

OWASP VBScan is a Black Box vBulletin Vulnerability Scanner

web scanner - exploitation - information gathering

Greenbone Vulnerability Manager

This repo records all the vulnerabilities of linux software I have reproduced in my local workspace

Original Automated CVE Checking Tool

Extraction of iMessage Data via XSS

Hourly updated database of exploit and exploitation reports

A Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner

A Binary Ninja plugin for vulnerability research.

WPrecon (WordPress Recon), is a vulnerability recognition tool in CMS Wordpress, developed in Go and with scripts in Lua.

GradeJS analyzes production Webpack bundles without having access to the source code of a website. Instantly see vulnerabilities, outdated packages, and more just by entering a web application URL.

Vulnogram is a tool for creating and editing CVE information in CVE JSON format

Static and dynamic Android application security analysis

The knife of the Admin & Security auditor

Fully open-source security audit for project dependencies based on known vulnerabilities and advisories. Supports both local repos and container images. Integrates with various CI environments such as Azure Pipelines, CircleCI and Google CloudBuild. No server required!

汽车/安卓/固件/代码安全测试工具集

A static binary vulnerability scanner

Apache Shiro 反序列化漏洞检测与利用工具

Open-Source Vulnerability Intelligence Center - Unified source of vulnerability, exploit and threat Intelligence feeds