漏洞知识库
漏洞、CVE、PoC、EXP 与安全研究
guac - GUAC aggregates software security metadata into a
项目说明GUAC: Graph for Understanding Artifact Composition<p align="center">…
AutoPentestX - AutoPentestX – Automated Pentesting & Vulnerabilit
项目说明AutoPentestX - Automated Penetration Testing Toolkit![License: MIT]()
TsojanScan - An integrated BurpSuite vulnerability detection pl
项目说明TsojanScan一个集成的BurpSuite漏洞探测插件First 本着市面上各大漏洞探测插件的功能比较单一，因此与TsojanSecTeam成员决定在已有框架的基…
V3n0M-Scanner - Popular Pentesting scanner in Python3.6 for SQLi/X
项目说明Venom!venom#### Offensi Framework for Scanning & Pentesting!os![pythonver]()![Li…
anchore-engine - A service that analyzes docker images and scans fo
项目说明Anchore Engine ![CircleCI]()IMPORTANT NOTEAs of 2023, Anchore Engine is no longer ma…
nginxpwner - Nginxpwner is a simple tool to look for common Ngi
项目说明Nginxpwner<p align="center"><img src=" /></p>Nginxp…
subzy - Subdomain takeover vulnerability checker
项目说明Subzy Subdomain takeover tool which works based on matching response fingerprints fr…
ScopeSentry - ScopeSentry-Cyberspace mapping, subdomain enumerat
项目说明<di=center> <img src="docs/images/favicon.ico"/></div>En…
Watson - Enumerate missing KBs and suggest exploits for use
项目说明WatsonWatson is a .NET tool designed to enumerate missing KBs and suggest exploits f…
热门
Logout4Shell - Use Log4Shell vulnerability to vaccinate a victim
项目说明Logout4Shell!logoDescription A impacting Apache Log4j 2.0 through 2.14.1 was disclos…
Damn-Vulnerable-GraphQL-Application - Damn Vulnerable GraphQL Application is an intentio
项目说明Damn GraphQL ApplicationDamn GraphQL Application is an intentionally implementation …
buttercup - Buttercup finds and patches software vulnerabiliti
项目说明Buttercup Cyber Reasoning System (CRS)![Tests]()![Component Integration Tests]()
热门
copacetic - 🧵 CLI tool for directly patching container images!
项目说明Project Copacetic: Directly patch container image !GitHub![codecov]()
ai-exploits - A collection of real world AI/ML exploits for resp
项目说明<di="center">AI Exploits <img width="250" src=" al…
appshark - Appshark is a static taint analysis platform to sc
项目说明Document Index1.o2.startup3.how to write rules4.how to find compliance problems use …
xvwa - XVWA is a badly coded web application written in P
项目说明Xtreme Web Application (XVWA) =========================================XVWA is a bad…
cve-bin-tool - The CVE Binary Tool helps you determine if your sy
项目信息开发语言：PythonStar 数：1768技术要点该项目属于漏洞知识库方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕The CVE Binary T…
CodeQL - 《深入理解CodeQL》Finding vulnerabilities with CodeQL.
项目说明《深入理解CodeQL》!CodeQL本项目收集CodeQL相关内容，包括CodeQL的设计原理实现方法或使用CodeQL进行的漏洞挖掘案例等。其优点在于可以利用已知的…
XXEinjector - Tool for automatic exploitation of XXE vulnerabili
项目说明XXEinjectorXXEinjector automates retrieving files using direct and out of band metho…
inql - InQL is a robust, open-source Burp Suite extension
项目说明InQL v6.1.2 - Burp Extension for Ad GraphQL Testing![Doyensec Research Island]()!Git…
列表模式
共 249 条
guac - GUAC aggregates software security metadata into a
AAutoPentestX - AutoPentestX – Automated Pentesting & Vulnerabilit
TsojanScan - An integrated BurpSuite vulnerability detection pl
V3n0M-Scanner - Popular Pentesting scanner in Python3.6 for SQLi/X
Aanchore-engine - A service that analyzes docker images and scans fo
nginxpwner - Nginxpwner is a simple tool to look for common Ngi
Ssubzy - Subdomain takeover vulnerability checker
ScopeSentry - ScopeSentry-Cyberspace mapping, subdomain enumerat
Watson - Enumerate missing KBs and suggest exploits for use
Logout4Shell - Use Log4Shell vulnerability to vaccinate a victim
DDamn-Vulnerable-GraphQL-Application - Damn Vulnerable GraphQL Application is an intentio
Bbuttercup - Buttercup finds and patches software vulnerabiliti
copacetic - 🧵 CLI tool for directly patching container images!
ai-exploits - A collection of real world AI/ML exploits for resp
appshark - Appshark is a static taint analysis platform to sc
xvwa - XVWA is a badly coded web application written in P
cve-bin-tool - The CVE Binary Tool helps you determine if your sy
CodeQL - 《深入理解CodeQL》Finding vulnerabilities with CodeQL.
XXXEinjector - Tool for automatic exploitation of XXE vulnerabili