Tools

mayank-s16/swagger-html-injection-cve-2025-8191

XSS Test Swagger 3.14.1 to 3.37.0

mateustesser/cve-2023-31719

Proof-of-concept exploit for CVE-2023-31719, demonstrating SQL injection in the FUXA web application's /api/signin endpoint via a crafted JSON…

randomrobbiebf/cve-2024-54369

Zita Site Builder <= 1.0.2 - Missing Authorization to Arbitrary Plugin Installation

randomrobbiebf/cve-2023-6289

Swift Performance Lite <= 2.3.6.14 - Missing Authorization to Unauthenticated Settings Export

blueowl-overlord/burp_cve-2025-31324

Python-based Burp Suite extension is designed to detect the presence of CVE-2025-31324

l4zyfox/rise-ultimate_project_manager_e_crm

CVE-2025-3855 - RISE Ultimate Project Manager - IDOR

aureum01/cve-2023-23752

A bash automation that exploits the vulnerable endpoints for the Joomla! API 4.0 - 4.2.7

havoc10-sw/detect_polyfill_cve-2024-38537-

Here's a Python script that checks if the polyfill.io domain is present in the Content Security Policy (CSP) header of a given web application.

osirium/suds

Clone of suds 0.4 + suds-0.4-CVE-2013-2217.patch

corgizz/springcloud

Spring Cloud Config CVE-2019-3799|CVE_2020_5410 漏洞检测

palmtreeforest/codepath_week_7-8

CodePath Assignment for Weeks 7 & 8: CVE-2017-14719, CVE-2019-9787 & Unauthenticated Page/Post Content Modification via REST API

cropnet/ni8mare

Comprehensive vulnerability detection tool for n8n workflow automation instances. Detects the critical CVE-2026-21858 vulnerability (CVSS 10.0)…

themalwareguardian/brokeclaudia

CVE-2025-41090 (brokeCLAUDIA): Broken access control in microCLAUDIA, the anti-ransomware platform by CCN-CERT.

google/martian

Martian is a library for building custom HTTP/S proxies

gsmith257-cyber/graphcrawler

GraphQL automated security testing toolkit

purpleteam-labs/purpleteam-server-scanner

Server scanning component of purpleteam

purpleteam-labs/purpleteam

CLI component of purpleteam

fruh/extendedmacro

ExtendedMacro - BurpSuite plugin providing extended macro functionality