#1Static and dynamic code analysis, SAST, DAST, and code review tools.
Kitploit recommended
satheesh575555/external_expat_aosp10_r33_cve-2022-25236Patched version of Expat XML parser for AOSP10, addressing CVE-2022-25236. Provides source code for vulnerability analysis and educational review of…
centisgood/duo-agentflow-auditorAI Code Security — four agents that catch what SAST misses in AI-generated code. Built on GitLab Duo Agent Platform.
savagesanta11/reproduce-cve-2024-21513Demonstrates CVE-2024-21513 in langchain-experimental, showing arbitrary code execution via VectorSQLDatabaseChain's eval() on retrieved values.…
jacklosingheart/ghsa-4cx5-89vm-833x-pocGHSA-4cx5-89vm-833x/CVE-2024-52800
rvermeulen/apache-struts-cve-2017-9805Exploit for Apache Struts CVE-2017-9805, a remote code execution vulnerability in the REST plugin. Enables penetration testing and security…
cairuojin/cve-2018-8032从老外那里下载了该漏洞的修复工程，无奈依赖包实在是太多下不下来，选取其中axis工程打成jar包后发现已成功修复项目的漏洞，有需要的亲可以下载重新打jar包替换即可。 clone后用idea打axis这个jar包即可
mbrasile/cve-2017-9841CVE-2017-9841 detector script
randomrobbiebf/cve-2024-12877GiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object Injection
nsbyte/cve-2018-6574Go-based proof-of-concept exploit for CVE-2018-6574, demonstrating remote code execution via crafted requests to vulnerable Go applications.
k1nakoo/cve-2024-10410Proof-of-concept exploit for CVE-2024-10410: unrestricted file upload in Online Hotel Reservation System. Demonstrates bypass of image validation via…
debalinax64/cve-2016-2098CVE-2016-2098 - POC of RCE Ruby on Rails: Improper Input Validation (CVE-2016-2098) in bash. Remote attackers can execute arbitrary Ruby code by…
wudidwo/cve-2017-7504-pocProof-of-concept exploit for CVE-2017-7504 targeting JBoss 4.x JBossMQ JMS deserialization vulnerability. Includes usage help via -h flag.
jack0we/cve-2024-6387Proof-of-concept exploit for CVE-2024-6387, a remote code execution vulnerability in OpenSSH server, demonstrating exploitation techniques for…
randomrobbiebf/cve-2024-6330GEO my WordPress < 4.5.0.2 - Unauthenticated LFI to RCE/PHAR Deserialization
cyber-warrior-sec/cve-2024-28397-js2py-sandbox-escapeProof-of-concept exploit for CVE-2024-28397, a sandbox escape in js2py allowing remote code execution via crafted JavaScript, with a dynamic patch…
shoucheng3/jenkinsci__script-security-plugin_cve-2023-24422_1228.vd93135a_2fb_25Jenkins plugin providing script approval workflows and Groovy sandboxing to enforce secure script execution, with ACL-aware permission checks and…
randomrobbiebf/cve-2024-9290Super Backup & Clone - Migrate for WordPress <= 2.3.3 - Unauthenticated Arbitrary File Upload
skrkcb2/cve-2024-5452Detailed technical analysis of CVE-2024-5452, a remote code execution vulnerability in PyTorch Lightning via DeepDiff delta property pollution, with…
