一个漏洞 PoC 知识库。A knowledge base for vulnerability PoCs(Proof of Concept), with 1k+ vulnerabilities.
-
Updated
Apr 21, 2025 - Dockerfile
#
vulnerable-scan
Here are 30 public repositories matching this topic...
Local privilege escalation via PetitPotam (Abusing impersonate privileges).
-
Updated
Mar 30, 2023 - C
Git All the Payloads! A collection of web attack payloads.
-
Updated
May 15, 2023 - Shell
⚡ Worlds fastest steghide cracker, chewing through millions of passwords per second ⚡
-
Updated
Oct 10, 2023 - C++
增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618，CVE-2019-2729检测，Python3支持
-
Updated
Jun 16, 2024 - Python
[DEPRECATED] Assign Azure Active Directory Identities to Kubernetes applications.
-
Updated
Oct 2, 2023 - Go
Scans Software Bill of Materials (SBOMs) for security vulnerabilities
-
Updated
Mar 31, 2025 - Go
Developer-friendly incident response with brilliant Slack integration
-
Updated
Apr 18, 2025 - Python
A collection of awesome one-liner scripts especially for bug bounty tips.
-
Updated
Jul 29, 2024
Intentionally vulnerable Node.js REST API for benchmarking SAST, SCA, and code quality tools. Contains 30 real, functional issues across Critical/High/Medium/Low severities covering SQL injection, command injection, path traversal, IDOR, hardcoded secrets, and more. Not for production use.
issues sonarqube vulnerable vulnerable-container vulnerable-application vulnerable-web-app sast sonarcloud vulnerable-apps vulnerable-app vulnerable-web-applications vulnerable-sample-app vulnerable-scan vurna minimal-vulnerable node-vulnerable
-
Updated
Mar 1, 2026 - JavaScript
A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference
-
Updated
Aug 6, 2023 - Python
Improve this page
Add a description, image, and links to the vulnerable-scan topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the vulnerable-scan topic, visit your repo's landing page and select "manage topics."