Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340
- weblogic
- tomcat
- exploit
- poc
Repository Index
75,859 visible repositories in the index
25–48 of 95 · Most stars
Mythril is a symbolic-execution-based securty analysis tool for EVM bytecode. It detects security vulnerabilities in smart contracts built for Ethereum and other EVM-compatible blockchains.
- security-analysis
- ethereum
- blockchain
- smart-contracts
Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.
- malware
- virustotal
- malpedia
- urlhaus
A high performance offensive security tool for reconnaissance and vulnerability scanning
- reconnaissance
- scanner
- vulnerability-assessment
- vulnerability-scanner
基于 AI Agent + MCP 工具链 + 渗透 Skill 编排， 配合大语言模型， 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。
pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.
- security
- pentesting
- security-tools
- python
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
Automatic SSRF fuzzer and exploitation tool
- ssrf
- server-side-request-forgery
- exploitation
- vulnerability
巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。
- security
- pentesting
- infosec
- exploits
Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能
Tool to look for several security related Android application vulnerabilities
File upload vulnerability scanner and exploitation tool.
- python3
- pentesting
- exploitation
- takeover
Visa Vulnerability Agentic Harness
Vulnerability Intelligence Platform
- cve
- vulnerabilities
- security-tools
- nvd
本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。
- security
- security-scanning
- security-tools
- vulnerability-scanning
Zero shot vulnerability discovery using LLMs
Create randomly insecure VMs
- security
- security-vulnerability
- virtualization
- randomization
A modular, stack-agnostic toolkit for AI coding agents to autonomously find, reproduce, and patch vulnerabilities.
cve-search - a tool to perform local searches for known vulnerabilities
- cve-search
- common-vulnerabilities
- cpe
- cve-databases
A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk
- attack-range
- attack-simulation
- adversary
- simulation
Building a Neural Network-Native Engine (3N). Python authoring, C++ runtime, Vulkan/WebGPU. Windows, Linux, Android and Web.
- editor
- game-engine
- physics
- python
JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
- exploit
- exploiting-vulnerabilities
- deserialization
- javadeser
网络摄像头漏洞扫描工具 | Webcam vulnerability scanning tool
- cve-2017-7921
- cve-2020-25078
- dahua
- dlink
Deep Eye orchestrates multiple AI providers (OpenAI, Claude, Grok, Gemini, OLLAMA, Groq, Mistral, OpenRouter, LiteLLM, LM Studio) for intelligent payload generation, scans targets for 45+ vulnerability types, and produces professional reports with compliance mapping.