Vulnerability Scanners

thebadinteger/p2pwn

Dahua cameras security scanner via P2P

kostas-pa/lfitester

Python3 tool that detects and exploits Local File Inclusion vulnerabilities, with crawling, path traversal and filter bypass payloads, and automated…

naimkowshik/lbfh

About All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers

cro-thehacker/v1ew-s0urce

Python-based penetration testing framework and reconnaissance toolkit offering port scanning, information gathering, and network scanning modules for…

checkmk1/checkmk_php2shell

Checkmk extension with an agent plug-in that inventories PHP binaries and Apache mod_php on Linux hosts and reports PHP2Shell…

hevnsnt/cvengine

AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.

ntoskernel/deepsecrets

Offline secrets scanner combining regex rules, lexer-based semantic analysis, and hashed-value matching to detect exposed credentials in code with…

0xblackash/cve-2026-111497

Advisory and proof-of-concept toolkit for CVE-2026-111497 (Node2Shell), a Brotli heap overflow in Node.js, with trigger scripts, version checker, and…

0xajstrike/emsign-trust-scan

Offline scanner for the October 2026 eMudhra/emSign CA key compromise, finds affected certificates across OS trust stores, CA bundles, Java cacerts,…

assetnote/node2shell-scanner

High fidelity detection mechanism for node2shell (CVE-2026-111497)

glen-testing/low-int-cert-monitor

Monitor Certificate Transparency logs for certificates with trivially small EC private keys (the eMudhra weak-key class). P-256/384/521.

affolter-engineering/hvt

Rust CLI that probes HTTP methods (including WebDAV and DeltaV verbs) against a target URL to surface verb tampering, access-control bypasses, and…

apaonum/brotli-cve-check

Agent skill + script to scan projects for CVE-2026-111497 (Brotli), rate criticality and suggest fixes

foxcornlab/thc-bloodmiami

AI chat-box pentesting tool in C: fires language (SQLi/NoSQL/XSS/SSTI) and prompt injection payloads at chat interfaces and flags the ones that bite

owasp/agentic-vulnerability-discovery-and-validation-harness

Agentic harness that automates vulnerability discovery and validation, orchestrating AI-driven analysis workflows to confirm exploitable findings.

betterleaks/betterleaks

Fast, configurable secrets scanner for filesystems, git history, containers, and cloud sources, with Expr-based filtering, credential validation, and…