#1Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.
Kitploit recommended
h4x0r-dz/cve-2024-23897Python exploit for Jenkins CVE-2024-23897: arbitrary file read via CLI args4j parsing, enabling RCE. Scans hosts and extracts sensitive files from…
tenable/cnappgoatCNAPPgoat is an open source project designed to modularly provision vulnerable-by-design components in cloud environments.
mistymntncop/cve-2023-4863Proof-of-concept for CVE-2023-4863, a heap buffer overflow in WebP image decoding. Demonstrates the code_lengths trigger mechanism discovered by…
cynative/cynativeRead-only AI agent that queries your cloud, code, and runtime infrastructure to surface misconfigurations, leaked secrets, and privilege escalation…
w-digital-scanner/w12scan-clientNetwork asset discovery and scanning client that integrates nmap and masscan for large-scale asset identification, port scanning, and vulnerability…
nccgroup/upnp-pentest-toolkitUPnP Pentest Toolkit for Windows
horizon3ai/cve-2021-21972Proof of Concept Exploit for vCenter CVE-2021-21972
fox-it/cve-2019-1040-scannerSMB vulnerability scanner that detects CVE-2019-1040 by sending invalid NTLM authentication packets, enabling MIC Remove relay attacks for domain…
a3sal0n/falcongateA smart gateway to stop cyber criminals - Sponsored by Falcon Guard
al1ex/cve-2021-22205CVE-2021-22205& GitLab CE/EE RCE
jakson2030/wphunterWPHunter A Wordpress Vulnerability Scanner
rxerium/rxerium-templatesNuclei scripts created by @rxerium for zero days / actively exploited vulnerabilities.
fr0gger/vthuntingVthunting is a tiny script used to generate report about Virus Total hunting and send it by email, slack or telegram.
ke0z/binaivulhunterUse IDA PRO HexRays decompiler with OpenAI(ChatGPT) to find possible vulnerabilities in binaries
thumpbo/cve-2025-30208-expCVE-2025-30208-EXP
sjkim1127/reversecore_mcpA security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research,…
drego85/joomlascanA free software to find the components installed in Joomla CMS, built out of the ashes of Joomscan.
hackmanit/tinjaTInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines for eight…
