#1Automated tools for detecting known vulnerabilities in systems and applications.
Kitploit recommended
crussella0129/tricornea Fedora remix focused on pentesting and purple hat tooling
wildandeveloper/cve-2026-58231Non-destructive detection and precondition-verification tool for CVE-2026-58231, probing SAP Commerce Cloud Data Hub endpoints, default OAuth…
funfactor1/cve-2026-82090-18-years-all-versions-cvss-9.2-critical-the-pocket-forever-dayCVE-2026-82090 · CVSS 9.2 CRITICAL · 0-click stored XSS in Mozilla Pocket — all versions (v0 → v8.33.0.0) · 18-year forever-day · no patch · MITRE…
pedrocruz2202/mongobleed-scanner🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and…
guppss/vulnscan-pro⚡ Professional vulnerability scanner — port scanning, CVE detection, risk scoring & PDF reports in a dark PyQt6 dashboard
abraxas/cakephp-window-sqliCakePHP 5.4.2 - High - Remote - SQLi - WindowExpression range/frame offsets spliced into SQL
abhishekghosh/freak-attack-cve-2015-0204-testing-scriptBasic BASH Script to Automate OpenSSL based testing for FREAK Attack (CVE-2015-0204) as advised by Akamai.
elevenpaths/atomshields-cliCLI for AtomShields static analysis scanner. Install, uninstall, and run checkers and reports to detect vulnerabilities in source code projects.
shinthink/solrradar☄️ Mass reconnaissance & exploitation framework for Apache Solr CVE-2026-44825 — Velocity template injection to RCE
itskill-jp/wordpress-upgrade-checkRead-only check of every WordPress core version on a server. Flags CVE-2026-87902 (fixed in 7.1.2 and backports), auto-updates turned off, and…
tx-one/cve-2023-38408CVE-2023-38408 SSH Vulnerability Scanner & PoC
hackersatyamrastogi/n8n-exploit-cve-2025-68613-n8n-god-mode-ultimaten8n God Mode Ultimate - CVE-2025-68613 Scanner v1.0.0 ║ ║ Workflow Automation Remote Code Execution
stealthmoud/cve-2025-55182-scannerScanner and exploit toolkit for CVE-2025-55182, a critical pre-auth RCE in React Server Components. Includes detection, interactive shell, Docker…
0xblackash/cve-2026-63292Documents CVE-2026-63292, a stack-based buffer overflow in Apache mod_vhost_alias, with affected versions, safe version and configuration checks, and…
pduggusa/redis-cve-2026-23479-checkSafe read-only version checker + Sigma rule for Redis CVE-2026-23479 (authenticated use-after-free -> RCE). By DugganUSA.
plutosecurity/mcpwnfluenceInformation about CVE-2026-27825 & CVE-2026-27826 discovered by Pluto Security and a bash script for identifying vulnerable mcp-atlassian instances…
ferpalma21/nextjs-scannerThis script scans a list of URLs to detect if they are using **Next.js** and determines whether they are vulnerable to **CVE-2025-29927**. It…
mlx15/cve-2022-22954CVE-2022-22954 VMware Workspace ONE Access free marker SSTI
