漏洞知识库
漏洞、CVE、PoC、EXP 与安全研究
can-i-take-over-dns - "Can I take over DNS?" — a list of DNS providers a
项目说明<h1 align="center">Can I Take Over DNS?<br><sup><sub&…
iOS - Here you can find write ups for iOS Vulnerabilitie
项目信息开发语言：ShellStar 数：1106技术要点该项目属于漏洞知识库方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Here you can find…
nebula - AI-powered penetration testing assistant for autom
项目说明<di="center"> <br /> <h1>Nebula</h1> <p>AI P…
DVIA-v2 - Damn Vulnerable iOS App (DVIA) is an iOS applicati
项目说明DPowered by <a href="D written in Swift along with additional Damn iOS App (…
bug-bounty-platforms - A community-powered collection of all known bug bo
项目说明<di="center"><a href=" src="docs/marquee.png" alt=…
AutoPWN-Suite - AutoPWN Suite is a project for scanning vulnerabil
项目说明AutoPWN SuiteAutoPWN Suite is a project for scanning and exploiting systems automati…
热门
vulnserver - Vulnerable server used for learning software explo
项目说明 Check my blog at for more information and updates to this software. About the softw…
热门
OpenSCA-cli - OpenSCA is an open source software supply chain se
项目说明<di="center"> <img alt="logo" src="/resources/logo…
follina.py - POC to replicate the full 'Follina' Office RCE vul
项目说明'Follina' MS-MSDT n-day Microsoft Office RCEQuick POC to replicate the �…
exploitgym - ExploitGym is a large-scale, realistic benchmark b
项目说明ExploitGym![Website]()![Paper]()ExploitGym is a large-scale, real…
热门
log4shell-vulnerable-app - Spring Boot web application vulnerable to Log4Shel
项目说明Log4Shell sample application (C)This repository contains a Spring Boot web applicati…
Eternalblue-Doublepulsar-Metasploit - Module of Metasploit to exploit the vulnerability
项目说明Eternalblue-Doublepulsar-MetasploitTHE SOFTWARE IS PROVIDED "AS IS", WITHO…
diva-android - DIVA Android - Damn Insecure and vulnerable App fo
项目说明DI---What is DIVA?DIVA (Damn insecure and App) is an App intentionally designed to b…
Fvuln - F-vuln（全称：Find-Vulnerability）是为了自己工作方便专门编写的一款自动化工具
项目说明<!-- markdownlint-disable first-line-heading --><p align="center"…
Bad-Pdf - Steal Net-NTLM Hash using Bad-PDF
项目说明Bad-PdfBad-PDF create malicious PDF file to steal NTLM(NTLMv1/NTLMv2) Hashes from wi…
CVE-2021-4034 - PoC for PwnKit: Local Privilege Escalation Vulnera
项目说明CPoC for PwnKit: Local Pri Escalation in polkit’s pkexec (C) PoC on Debian 10 and Ce…
labs - Vulnerability Labs for security analysis
项目说明| *Name* | *Description* ||:--------------|:--------------|| C | Directory tra in El…
Vulnerability-Wiki-PoC - 🚀 2024-至今 1Day 漏洞 PoC 深度研究与复现归档。涵盖 OA、ERP、安防、数通、大模
项目说明💠 <p align="center"> <img src=" alt="Release"> …
vulnerable-code-snippets - Twitter vulnerable snippets
项目说明<!--A 'Thank you' from us / YesWeHackMC0tPjA0wLS8qPjxpbWcyoqLy1hbG+Test…
local-php-security-checker - PHP security vulnerabilities checker
项目说明Local PHP Security Checker==========================WARNING: This repository is now …
列表模式
共 249 条
can-i-take-over-dns - "Can I take over DNS?" — a list of DNS providers a
IiOS - Here you can find write ups for iOS Vulnerabilitie
nebula - AI-powered penetration testing assistant for autom
DDVIA-v2 - Damn Vulnerable iOS App (DVIA) is an iOS applicati
bug-bounty-platforms - A community-powered collection of all known bug bo
AutoPWN-Suite - AutoPWN Suite is a project for scanning vulnerabil
vulnserver - Vulnerable server used for learning software explo
OpenSCA-cli - OpenSCA is an open source software supply chain se
follina.py - POC to replicate the full 'Follina' Office RCE vul
Eexploitgym - ExploitGym is a large-scale, realistic benchmark b
log4shell-vulnerable-app - Spring Boot web application vulnerable to Log4Shel
Eternalblue-Doublepulsar-Metasploit - Module of Metasploit to exploit the vulnerability
diva-android - DIVA Android - Damn Insecure and vulnerable App fo
Fvuln - F-vuln（全称：Find-Vulnerability）是为了自己工作方便专门编写的一款自动化工具
BBad-Pdf - Steal Net-NTLM Hash using Bad-PDF
CCVE-2021-4034 - PoC for PwnKit: Local Privilege Escalation Vulnera
Llabs - Vulnerability Labs for security analysis
Vulnerability-Wiki-PoC - 🚀 2024-至今 1Day 漏洞 PoC 深度研究与复现归档。涵盖 OA、ERP、安防、数通、大模
vulnerable-code-snippets - Twitter vulnerable snippets