#1Automated tools for detecting known vulnerabilities in systems and applications.
Kitploit recommended
mlx15/cve-2022-22954CVE-2022-22954 VMware Workspace ONE Access free marker SSTI
adimahluf/rapidwebreconA high-performance automation tool designed to bridge the gap between technical web reconnaissance and executive reporting. Developed by **Adi…
gitlab-da/tutorials/security-and-governance/custom-scanner-integration/fern-pattern-scannerScans selected files for patterns stated in rules. This is used in order to find secrets you may have accidentally written to a file. This scanner is…
vqkro/ultrasploiterA single binary that folds a port scanner, the full Exploit-DB index (47k entries) and runnable exploit modules into one tool. Written in Rust, runs…
abrewer251/cve-2025-6543_citrixnetscaler_pocMulti-host, multi-port scanner and auditor for CVE-2025-6543-affected NetScaler devices. Supports SNMP and SSH enumeration with optional CSV…
aqiao-jashell/py-cve-2021-41773python编写的apache路径穿越poc&exp
angus-team/f5-big-ip-rce-cve-2022-1388Multi-threaded Python scanner for CVE-2022-1388, an F5 BIG-IP remote code execution vulnerability. Supports single URL and batch file input, with…
swiftdevcollective/xcodeprojectsecurityA macOS app to scan Xcode project files for possible security issues.
teycir/honeypotscanFree honeypot token scanner for Ethereum, Polygon & Arbitrum. Detect scam tokens before you buy. Instant analysis of smart contracts using 13…
rxerium/cve-2025-26465MitM attack allowing a malicious interloper to impersonate a legitimate server when a client attempts to connect to it
umair-aziz025/cve-2026-5281-research-toolkitChrome WebGPU Use-After-Free (CWE-416) This toolkit is for security research and defensive verification around CVE-2026-5281. Patched Chrome…
gagaltotal/cve-2026-42945-nginx-rift-toolkitAutomated toolkit for scanning, exploiting, and patching CVE-2026-42945 (critical RCE in nginx). Includes network scanner, heap spray exploit, and…
longhoangth18/cve-2024-4577Scanner and exploit for CVE-2024-4577 PHP CGI argument injection vulnerability. Detects susceptible PHP applications and executes arbitrary code via…
bigb0x/cve-2024-34470POC and bulk scanner for CVE-2024-34470
fl0ydsec/cve-2026-63030Python mass exploit and detector for the WordPress Core pre-auth RCE chain CVE-2026-63030 and CVE-2026-60137, chaining SQL injection into remote code…
chef-cft/salt-vulnerabilitiesChecks for CVE-2020-11651 and CVE-2020-11652
yora1928/papercut-cve-2026-81578-82078Security research tool for PaperCut CVE-2026-81578 & CVE-2026-82078
sc4rfurry/r4venzcl4wA Modular Framework for Pentesters and Bug Hunters written in python.
