漏洞知识库
漏洞、CVE、PoC、EXP 与安全研究
vuln-bank - A deliberately vulnerable banking application desi
项目说明 Bank Application 🏦A deliberately web application for practicing application securit…
AzureGoat - AzureGoat : A Damn Vulnerable Azure Infrastructure
项目说明AzureGoat : A Damn Azure Infrastructure !1 Compromising an organization's cloud…
vulnerability - 收集、整理、修改互联网上公开的漏洞POC
项目说明!lal0ne/收集、整理、修改互联网上公开的漏洞POC指纹| 产品 | FOFA | Shodan | ZoomEye || --------------------…
security-code-scan - Vulnerability Patterns Detector for C# and VB.NET
项目说明![Security Code Scan]() * Patterns Detector for C# and VB.NET* - Website ![Build]()D…
secDevLabs - A laboratory for learning secure web and mobile de
项目说明<p align="center"> <img src="images/secDe.png" allign=&…
routeros-scanner - Tool to scan for RouterOS (Mikrotik) forensic arti
项目说明<img src=' img align='right' width='377' height='10…
EntraGoat - A deliberately vulnerable Microsoft Entra ID envir
项目说明EntraGoat - A Deliberately Entra ID En<p align="center"> <img src…
APKHunt - APKHunt is a comprehensive static code analysis to
项目说明!Apkhunt: OWASP MAS Android security analysisAPKHunt | OWASP MAS Static AnalyzerApkh…
blind-ssrf-chains - An exhaustive list of all the possible ways you ca
项目说明IntroductionWhat is Server Side Request Forgery (SSRF)?Server Side Request Forgery o…
reconmap - Reconmap is a collaboration-first security operati
项目说明<di="text-align: center;"><h1>Reconmap</h1>![YouTube]()&…
cookiemonster - 🍪 CookieMonster helps you detect and abuse vulnera
项目说明:cookie: CookieMonsterCookieMonster is a command-line tool and API for decoding and …
mantis - Mantis is a security framework that automates the
项目说明<img src="./images/mantis.png" align="middle"><p align=…
android-vts - Android Vulnerability Test Suite - In the spirit o
项目说明#Android Test SuiteDownload from GithubUPDATE 2015/12/15: AndroidVTS is currently no…
hackazon - A modern vulnerable web app
项目说明Hackazon========Hackazon is a free, test site that is an online storefront built wit…
Silver - Mass scan IPs for vulnerable services
项目信息开发语言：未知Star 数：1053技术要点该项目属于漏洞知识库方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Mass scan IPs for vu…
evilarc - Create tar/zip archives that can exploit directory
项目说明ePurposee lets you create a zip file that contains files with directory tra characte…
magicRecon - MagicRecon is a powerful shell script to maximize
项目说明<h1 align="center"> <br> <a href=" src=" alt=&quo…
ruby-advisory-db - A database of vulnerable Ruby Gems
项目说明Ruby Ad DatabaseThe Ruby Ad Database is a community effort to compile all securityad…
diodb - Open-source vulnerability disclosure and bug bount
项目说明<di="center"><a href=" src="docs/marquee.png" alt=…
vibe-security-skill - Agent skill that audits vibe-coded apps for common
项目说明<p align="center"> <img src=" alt="Security for apps&qu…
列表模式
共 249 条vuln-bank - A deliberately vulnerable banking application desi
AzureGoat - AzureGoat : A Damn Vulnerable Azure Infrastructure
vulnerability - 收集、整理、修改互联网上公开的漏洞POC
security-code-scan - Vulnerability Patterns Detector for C# and VB.NET
secDevLabs - A laboratory for learning secure web and mobile de
Rrouteros-scanner - Tool to scan for RouterOS (Mikrotik) forensic arti
EntraGoat - A deliberately vulnerable Microsoft Entra ID envir
APKHunt - APKHunt is a comprehensive static code analysis to
Bblind-ssrf-chains - An exhaustive list of all the possible ways you ca
reconmap - Reconmap is a collaboration-first security operati
cookiemonster - 🍪 CookieMonster helps you detect and abuse vulnera
mantis - Mantis is a security framework that automates the
android-vts - Android Vulnerability Test Suite - In the spirit o
hackazon - A modern vulnerable web app
SSilver - Mass scan IPs for vulnerable services
evilarc - Create tar/zip archives that can exploit directory
magicRecon - MagicRecon is a powerful shell script to maximize
ruby-advisory-db - A database of vulnerable Ruby Gems
diodb - Open-source vulnerability disclosure and bug bount