Vulnerability Analysis

8b-is/smart-tree

Smart Tree: not just a tree, a philosophy. A context-aware, AI-crafted replacement for 20+ tools with MEM8 quantum compression, semantic search,…

revoltsecurities/shodanx

ShodanX is a tool to gather information of targets using shodan dorks⚡.

corgea/sighthound

Tree-sitter based static vulnerability scanner with pattern matching and taint-flow analysis for multi-language source code. Outputs findings as…

zierax/grafana-final-scanner

Grafana scanner with all public CVEs that I collected in one script to make grafana testing easier

mindpointgroup/cloudfrunt

A tool for identifying misconfigured CloudFront domains

fox-it/log4j-finder

Find vulnerable Log4j2 versions on disk and also inside Java Archive Files (Log4Shell CVE-2021-44228, CVE-2021-45046, CVE-2021-45105)

gfek/lepus

Subdomain finder

botherder/kraken

Cross-platform Yara scanner written in Go

jiangsir404/poc-s

POC-T强化版本 POC-S , 用于红蓝对抗中快速验证Web应用漏洞， 对功能进行强化以及脚本进行分类添加，自带dnslog等, 平台补充来自vulhub靶机及其他开源项目的高可用POC

corretto/hotpatch-for-apache-log4j2

An agent to hotpatch the log4j RCE from CVE-2021-44228.

strongcourage/uafuzz

Binary-level directed fuzzer specialized in detecting Use-After-Free vulnerabilities via ordering-aware input metrics and static analysis, enabling…

trailofbits/multiplier

Indexes C/C++ build artifacts into a queryable whole-program database, exposing AST, token, and IR-level APIs for code auditing and vulnerability…

zhuowei/macdirtycowdemo

Get root on macOS 13.0.1 with CVE-2022-46689 (macOS equivalent of the Dirty Cow bug), using the testcase extracted from Apple's XNU source.

weareaisle/nano-analyzer

A minimal LLM-powered zero-day vulnerability scanner by AISLE.

jpcertcc/malconfscan

Volatility plugin for extracts configuration data of known malware

raghavd3v/crlfsuite

The most powerful CRLF injection (HTTP Response Splitting) scanner.