A PoC that exploits a vulnerability to bypass the Xiaomi HyperOS community restrictions of BootLoader unlocked account bindings.
- android
- android-development
- bootloader
- bootloader-unlock
Repository Index
76,356 visible repositories in the index
49–72 of 193 · Most stars
📦 Make security testing of K8s, Docker, and Containerd easier.
- penetration
- penetration-testing-tools
- kubernetes
- docker
A Security Tool for Bug Bounty, Pentest and Red Teaming.
- vulnerability-scanner
- poc
- penetration-testing
- afrog
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340
- weblogic
- tomcat
- exploit
- poc
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
- vulnerabilities
- scanner
- firefox-extension
- grunt-plugins
Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.
- malware
- virustotal
- malpedia
- urlhaus
面向网络安全从业者的知识文库🍃 (停止更新)
- cve
- 1day
- 0day
- vuln
A high performance offensive security tool for reconnaissance and vulnerability scanning
- reconnaissance
- scanner
- vulnerability-assessment
- vulnerability-scanner
Reptar, Downfall, Zenbleed, ZombieLoad, RIDL, Fallout, Foreshadow, Spectre, Meltdown vulnerability/mitigation checker for Linux & BSD
- mitigation
- meltdown
- spectre
- cve-2017-5753
基于 AI Agent + MCP 工具链 + 渗透 Skill 编排， 配合大语言模型， 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。
pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.
- security
- pentesting
- security-tools
- python
All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers
- scanner
- crawler
- information-gathering
- admin-scanner
Advanced vulnerability scanning with Nmap NSE
- vulnerability
- vulnerability-scanners
- vulnerability-detection
- vulnerability-identification
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
EMBA - The firmware security analyzer
- firmware
- linux
- embedded-linux
- security-tools
This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter
- bugbounty
- security
- sqlinjection
- vulnerability
Automatic SSRF fuzzer and exploitation tool
- ssrf
- server-side-request-forgery
- exploitation
- vulnerability
巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。
- security
- pentesting
- infosec
- exploits
Nmap NSE scripts that turn a service scan into CVEs, CVSS scores and known exploits — fingerprints software from HTTP responses and checks every detected CPE against the Vulners database.
- cpe
- cve
- cvss
- exploit-database
Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能
🚀Vulfocus 是一个漏洞集成平台，将漏洞环境 docker 镜像，放入即可使用，开箱即用。
- vulfocus
- docker
- vulnerability-environment
- vulfocus-docker
Potentially dangerous files
- list
- web
- vulnerability
- files
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
- scanning-tool
- secret-keys
- secrets-management
- infosectools