Vulnerability Analysis

rapid7/metasploit-framework

Open-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…

horkimhab/poc-cve-collection

🧪 Collects CVE PoCs and backs them up to the Internet Archive when they are unavailable on GitHub.

jp1337/easywall

Web interface for the nftables firewall on Linux, written in Go. The apply undoes itself after 120 seconds unless you confirm it — you cannot lock…

owasp/pysap

pysap is an open source Python library that provides modules for crafting and sending packets using SAP's NI, Diag, Enqueue, Router, MS, SNC, IGS,…

trufflesecurity/trufflehog

Find, verify, and analyze leaked credentials

horsicq/detect-it-easy

Program for determining types of files for Windows, Linux and MacOS.

big-comfy/deadair

Finds the detection rules in your SIEM that are running blind

wietze/hijacklibs

Project for tracking publicly disclosed DLL Hijacking opportunities.

mindersec/minder

Software Supply Chain Security Platform

inverse-inc/packetfence

PacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) solution. Boasting an impressive feature set including a…

msaad00/agent-bom

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings,…

pmd/pmd

An extensible multilanguage static code analyzer.

google/oss-fuzz

OSS-Fuzz - continuous fuzzing for open source software.

badkeys/badkeys

Tool to find common vulnerabilities in cryptographic public keys

pigyon/mcpwner

Model Context Protocol server for autonomous vulnerability discovery

stackrox/stackrox

The StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides…