漏洞知识库
漏洞、CVE、PoC、EXP 与安全研究
![xpoc - 为供应链漏洞扫描设计的快速应急响应工具 [快速应急] [漏洞扫描] [端口扫描] [xray2.0](/uploads/hack/53bda4cc4dfe8cc567cd655e17e1758e.png)
xpoc - 为供应链漏洞扫描设计的快速应急响应工具 [快速应急] [漏洞扫描] [端口扫描] [xray2.0
项目说明<h1 align="center"> <img src="image/xpoc-logo.svg" alt=…
热门
herpaderping - Process Herpaderping proof of concept, tool, and t
项目说明Process Herpaderping [<img align="left" style="margin: 0px 15px 15…
热门
hack-tools - hack tools
项目说明<p align="center"> <img src=" alt="animated" />…
trojan-source - Trojan Source: Invisible Vulnerabilities
项目说明Trojan Source*Trojan Source: In *OWe present a new type of attack in which source co…
nuclei-wordfence-cve - 80k+ WordPress Nuclei templates, updated daily fro
项目说明<di="center"> <a href=" <img width="100" align=…
dep-scan - OWASP dep-scan is a next-generation security and r
项目说明IntroductionOWASP dep-scan is a next-generation security and risk audit tool based o…
webcopilot - An automation tool that enumerates subdomains then
项目说明<h1 align="center"><a href="<h4 align="center"&…
IoT-vulhub - IoT固件漏洞复现环境
项目说明IoT-受 项目的启发，希望做一个 IoT 版的固件漏洞复现环境。IoT- - 安装 - 使用说明 - 漏洞环境列表 - 贡献指南 - 关注我们安装在 Ubuntu 2…
terragoat - TerraGoat is Bridgecrew's "Vulnerable by Design" T
项目说明TerraGoat - Terraform Infrastructure![Maintained by Bridgecrew.io]()
DongTai - Dongtai IAST is an open-source Interactive Applica
项目说明DongTai![django-project]()![license Apache-2.0]()![GitHub release]()
secator - secator - the pentester's swiss knife
项目说明<h1 align="center"> <img src=" width="400"><…
singularity - A DNS rebinding attack framework.
项目说明Singularity of Origin Recent updates: NEW (2025-11-25): Chrome release 142 added Loc…
sast-skills - Collection of agent skills to find vulnerabilities
项目说明LLM SAST SkillsA collection of agent skills that turn your LLM coding assistant into…
RouteVulScan - Burpsuite - Route Vulnerable Scanning 递归式被动检测脆弱路径的
项目说明RouteBurpsuite - Route scanning 递归式被动检测脆弱路径的burp插件***贡献* 合作者 * 规则贡献 * 参考项目 HAE介绍Rout…
VAmPI - Vulnerable REST API with OWASP top 10 vulnerabilit
项目说明VAmPIThe API *(Based on OpenAPI 3)*!vampi![Docker Image CI]() !Docker PullsVAmPI is …
horusec - Horusec is an open source tool that improves ident
项目说明<p align="center" margin="20 0"><a href=" <img …
fuxi - Penetration Testing Platform
项目说明Fuxi 2.1 - de!![Python]()![GitHub license]()![GitHub stars]()![Fork]()Fuxi is cross-…
vapi - vAPI is Vulnerable Adversely Programmed Interface
项目说明vAPI ![Tweet]()![Docker]() ![Build Status]()![License: GPL v3]()![]() ![PHP]()![Lara…
damn-vulnerable-MCP-server - Damn Vulnerable MCP Server
项目说明Damn Model Context Protocol (DVMCP)A deliberately implementation of the Model Contex…
列表模式
共 249 条
xpoc - 为供应链漏洞扫描设计的快速应急响应工具 [快速应急] [漏洞扫描] [端口扫描] [xray2.0
herpaderping - Process Herpaderping proof of concept, tool, and t
hack-tools - hack tools
trojan-source - Trojan Source: Invisible Vulnerabilities
nuclei-wordfence-cve - 80k+ WordPress Nuclei templates, updated daily fro
dep-scan - OWASP dep-scan is a next-generation security and r
Wwebcopilot - An automation tool that enumerates subdomains then
IoT-vulhub - IoT固件漏洞复现环境
terragoat - TerraGoat is Bridgecrew's "Vulnerable by Design" T
VVibeSec-Skill - This skill helps Claude write secure code and prev
DongTai - Dongtai IAST is an open-source Interactive Applica
secator - secator - the pentester's swiss knife
singularity - A DNS rebinding attack framework.
sast-skills - Collection of agent skills to find vulnerabilities
RouteVulScan - Burpsuite - Route Vulnerable Scanning 递归式被动检测脆弱路径的
VAmPI - Vulnerable REST API with OWASP top 10 vulnerabilit
horusec - Horusec is an open source tool that improves ident
fuxi - Penetration Testing Platform