Repository Index

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.

• sn1per
• sn1per-professional
• bugbounty-platform
• attack-surface

Linux privilege escalation auditing tool

• exploits
• privilege-escalation-exploits
• kernel-exploitation
• applicable-exploits

Bjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potential vulnerabilities. Bjorn can perform brute force attacks, file stealing, host zombification, and supports custom attack scripts.

• automated-pentesting
• bruteforce
• cybersecurity
• e-paper

Ladon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP)或方法快速获取目标网络存活主机IP、计算机名、工作组、共享资源、网卡地址、操作系统版本、网站、子域名、中间件、开放服务、路由器、交换机、数据库、打印机等，大量高危漏洞检测模块MS17010、Zimbra、Exchange

• scanner
• portscan
• pentest
• hacking

Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.

• golang
• package-inventory
• supply-chain-security

Windows Exploit Suggester - Next Generation

• microsoft
• windows
• exploit
• suggester

Advanced vulnerability scanning with Nmap NSE

• vulnerability
• vulnerability-scanners
• vulnerability-detection
• vulnerability-identification

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

• security
• pentesting
• infosec
• exploits

Nmap NSE scripts that turn a service scan into CVEs, CVSS scores and known exploits — fingerprints software from HTTP responses and checks every detected CPE against the Vulners database.

• cpe
• cve
• cvss
• exploit-database

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能

• exploit
• cve
• rce
• vulnerabilities

File upload vulnerability scanner and exploitation tool.

• python3
• pentesting
• exploitation
• takeover

Modern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities.

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs

• cms
• content-management-system
• cms-framework
• wordpress

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

• exploit
• exploiting-vulnerabilities
• deserialization
• javadeser

Pre-submission compliance scanner for the Apple App Store and Google Play. Scans code, privacy manifests, Android manifests, and IPA/APK/AAB binaries against the review guidelines. Offline, no account.

• android
• app-store
• app-store-review
• cli

针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具

• spring
• spring-boot
• spring-vulnerability
• springboot

Set of tools to analyze Windows sandboxes for exposed attack surface.

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

• cve
• security
• hacktoberfest
• vulnerabilities

Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.

• angularjs
• xss
• xss-scanners
• exploit

Sectiv is a skill-driven AI security review for Burp Suite. Pick captured traffic and a review goal (IDOR, XSS, SQLi, SSRF…), and get a severity dashboard with description, steps to reproduce, impact, PoC, CWE/CVE and HTML/MD/JSON export. Built with Kotlin + Swing on the Montoya API.