Repositories list

• Awesome-POC

  Public
  一个漏洞 PoC 知识库。A knowledge base for vulnerability PoCs(Proof of Concept), with 1k+ vulnerabilities.

  vulnerable-scan

  Dockerfile

  •1k•0•0•0•Updated Apr 21, 2025Apr 21, 2025

• oncall

  Public
  Developer-friendly incident response with brilliant Slack integration

  vulnerable-scan

  Python

  •

  GNU Affero General Public License v3.0

  •386•0•0•0•Updated Apr 18, 2025Apr 18, 2025

• osv.dev

  Public
  Open source vulnerability DB and triage service.

  vulnerable-scan

  Python

  •

  Apache License 2.0

  •287•0•0•0•Updated Apr 16, 2025Apr 16, 2025

• ZipArchive

  Public
  ZipArchive is a simple utility class for zipping and unzipping files on iOS, macOS and tvOS.

  vulnerable-scan

  C

  •

  MIT License

  •1.4k•0•0•0•Updated Apr 15, 2025Apr 15, 2025

• jar-analyzer

  Public
  Jar Analyzer - 一个JAR包分析工具，批量分析，SCA漏洞分析，方法调用关系搜索，字符串搜索，Spring组件分析，信息泄露检查，CFG程序分析，JVM栈帧分析，进阶表达式搜索，字节码指令级的动态调试分析，反编译JAR包一键导出，一键提取序列化数据恶意代码，一键分析BCEL字节码

  vulnerable-scan

  Java

  •

  GNU General Public License v3.0

  •183•0•0•0•Updated Apr 11, 2025Apr 11, 2025

• awesome-hacker-search-engines

  Public
  A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

  vulnerable-scan

  Shell

  •

  MIT License

  •979•0•0•0•Updated Apr 10, 2025Apr 10, 2025

• JQF

  Public
  JQF + Zest: Coverage-guided semantic fuzzing for Java.

  vulnerable-scan

  Java

  •

  BSD 2-Clause "Simplified" License

  •119•0•0•0•Updated Apr 5, 2025Apr 5, 2025

• aws-customer-security-incidents

  Public
  A repository of breaches of AWS customers

  vulnerable-scan

  GNU General Public License v3.0

  •57•0•0•0•Updated Apr 5, 2025Apr 5, 2025

• bomber

  Public
  Scans Software Bill of Materials (SBOMs) for security vulnerabilities

  vulnerable-scan

  Go

  •

  Mozilla Public License 2.0

  •54•0•0•0•Updated Mar 31, 2025Mar 31, 2025

• macOS-iOS-system-security

  Public
  Here is some resources about macOS/iOS system security.

  vulnerable-scan

  56•0•0•0•Updated Feb 19, 2025Feb 19, 2025

• KDU

  Public
  Kernel Driver Utility

  vulnerable-scan

  C

  •

  MIT License

  •505•0•0•0•Updated Nov 10, 2024Nov 10, 2024

• legion

  Public
  Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitat…

  vulnerable-scan

  Python

  •

  GNU General Public License v3.0

  •187•0•0•0•Updated Nov 4, 2024Nov 4, 2024

• awesome-oneliner-bugbounty

  Public
  A collection of awesome one-liner scripts especially for bug bounty tips.

  vulnerable-scan

  MIT License

  •624•0•0•0•Updated Jul 29, 2024Jul 29, 2024

• WeblogicScan

  Public
  增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618，CVE-2019-2729检测，Python3支持

  vulnerable-scan

  Python

  •182•0•0•0•Updated Jun 16, 2024Jun 16, 2024

• Library-POC

  Public
  基于Pocsuite3、goby编写的漏洞poc&exp存档

  vulnerable-scan

  Python

  •201•0•0•0•Updated Apr 12, 2024Apr 12, 2024

• stegseek

  Public
  :zap: Worlds fastest steghide cracker, chewing through millions of passwords per second :zap:

  vulnerable-scan

  C++

  •

  GNU General Public License v2.0

  •127•0•0•0•Updated Oct 10, 2023Oct 10, 2023

• aad-pod-identity

  Public
  [DEPRECATED] Assign Azure Active Directory Identities to Kubernetes applications.

  vulnerable-scan

  Go

  •

  MIT License

  •254•0•0•0•Updated Oct 2, 2023Oct 2, 2023

• Awesome-Bugbounty-Writeups

  Public
  A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

  vulnerable-scan

  Python

  •1.1k•0•0•0•Updated Aug 6, 2023Aug 6, 2023

• payloads

  Public
  Git All the Payloads! A collection of web attack payloads.

  vulnerable-scan

  Shell

  •

  GNU General Public License v3.0

  •986•0•0•0•Updated May 15, 2023May 15, 2023

• PetitPotato

  Public
  Local privilege escalation via PetitPotam (Abusing impersonate privileges).

  vulnerable-scan

  C

  •55•0•0•0•Updated Mar 30, 2023Mar 30, 2023

• CVE-2022-2588

  Public
  exploit for CVE-2022-2588

  vulnerable-scan

  C

  •72•0•0•0•Updated Mar 4, 2023Mar 4, 2023

• package-version-lock

  Public
  Lock package.json with yarn

  vulnerable-scan

  JavaScript

  •1•0•0•0•Updated Sep 18, 2021Sep 18, 2021

• CVE-Exploits

  Public
  PoC exploits for software vulnerabilities

  vulnerable-scan

  C

  •158•0•0•0•Updated Aug 21, 2021Aug 21, 2021

• windows-kernel-exploits

  Public
  windows-kernel-exploits Windows平台提权漏洞集合

  vulnerable-scan

  C

  •

  MIT License

  •2.9k•0•0•0•Updated Jun 11, 2021Jun 11, 2021

• gh-spj

  Public
  Github - package.json and package-lock.json scrapper

  vulnerable-scan

  Python

  •

  MIT License

  •1•0•0•0•Updated Feb 25, 2021Feb 25, 2021

• Kubernetes_Security_Specialist_Study_Guide

  Public
  vulnerable-scan

  HCL

  •

  MIT License

  •114•0•0•0•Updated Jan 4, 2021Jan 4, 2021

• node_modules.nix

  Public
  A nix library to turn your package-lock.json into a fully populated node_modules directory

  vulnerable-scan

  Nix

  •2•0•0•0•Updated Dec 2, 2020Dec 2, 2020

• npm-install-demo

  Public
  Demonstrate changes to `package-lock.json` by `npm install`

  vulnerable-scan

  MIT License

  •1•0•0•0•Updated Nov 14, 2020Nov 14, 2020

• EQGRP

  Public
  Decrypted content of eqgrp-auction-file.tar.xz

  vulnerable-scan

  Perl

  •2.1k•0•0•0•Updated May 24, 2017May 24, 2017