Vulnerability Analysis

zaydmulani09/sentrymcp

A static + runtime security scanner for MCP (Model Context Protocol) servers

manhnho/shellsum

A defense tool - detect web shells in local directories via md5sum

1rhino2/fnprint

match functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.

trustsig-eu/wasm2c-tableflip

wasm2c sandbox escape. An untrusted WebAssembly module breaks out of the generated C sandbox and executes an arbitrary shell command on the host.

xghst0/reconkg

Vulnerability triage with provenance. Resolves CVEs from locally built corpora (NVD/KEV/EPSS, ExploitDB, nmap script.db) and emits verification…

stmcyber/rmitaste

Java RMI security testing tool for detecting, enumerating, and exploiting insecure RMI services using ysoserial deserialization gadgets to achieve…

indoushka/context-aware-offensive-intelligence

Research framework redefining post-exploitation through decision intelligence.

itm4n/privesccheck

Privilege Escalation Enumeration Script for Windows

mzfr/liffy

Local file inclusion exploitation tool

secuproject/dllhijackingscanner

This is a PoC for bypassing UAC using DLL hijacking and abusing the "Trusted Directories" verification.

cleanunicorn/theo

Ethereum recon and exploitation tool.

owasp/riskassessmentframework

The Secure Coding Framework

projectdiscovery/nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling…

freelabz/secator

secator - the pentester's swiss knife

1dayexploit/1day-archive

Technical deep-dives and root cause analyses of recently disclosed CVEs - reverse engineering patches, building proof-of-concepts, and documenting…

stackrox/stackrox

The StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides…

jsitech/jshielder

Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark