#1Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.
Kitploit recommended
0xmarcio/pocindexSearch public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context.
netspi/microburstA collection of scripts for assessing Microsoft Azure security
charles2gan/gda-android-reversing-toolthe fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which…
netspi/powerupsqlPowerUpSQL: A PowerShell Toolkit for Attacking SQL Server
owasp/devsecopsguidelineThe OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.
voorivex/pentest-guidePenetration tests guide based on OWASP including test cases, resources and examples.
flipkart-incubator/astraAutomated Security Testing For REST API's
bishopfox/cloudfoxAutomating situational awareness for cloud penetration tests.
nilsteampassnet/teampassCollaborative Passwords Manager
helloexp/0day各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新
dryxio/auto-re-agentReconstruct and validate C/C++ code from compiled programs with AI.
inverse-inc/packetfencePacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) solution. Boasting an impressive feature set including a…
cldrn/nmap-nse-scriptsMy collection of nmap NSE scripts
aquasecurity/kube-hunterHunt for security weaknesses in Kubernetes clusters
cisco-ai-defense/skill-scannerSecurity Scanner for Agent Skills
ghostpack/certifyC# tool for enumerating and exploiting misconfigurations in Active Directory Certificate Services (AD CS), enabling certificate template abuse,…
threedr3am/learnjavabugJava安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security…
