Tools

barroqueiro/cve-2023-37941

Exploit on the default cache of superset by using pickle

abhi-r3v0/adhrit

Android Security Suite for in-depth reconnaissance and static bytecode analysis based on Ghera benchmarks.

rakosn1cek/oversight

A lightweight security auditor and sandbox for shell scripts. Oversight combines a Static Analysis engine (Rust) with Dynamic Enforcement (Linux…

bankkroll/quickcheck-cve-2025-55182-react-and-cve-2025-66478-next.js

Script to quick check CVE-2025-55182 (React) and CVE-2025-66478 (Next.js) - Critical unauthenticated RCE vulnerabilities in the React Server…

inferiorak/cve-2025-55182-react2shell-async-scanner

Async RCE scanner for CVE-2025-55182 / CVE-2025-66478 — prototype-pollution → code execution via React Server Actions.

respondiq/jsp-webshell-scanner

🔍 A simple Bash script to detect malicious JSP webshells, including those used in exploits of SAP NetWeaver CVE-2025-31324.

samsung/utopia

UT based automated fuzz driver generation

vinsontang1/vultriage

The code of VulTriage: Triple-Path Context Augmentation for LLM-Based Vulnerability Detection

corgea/sighthound

Tree-sitter based static vulnerability scanner with pattern matching and taint-flow analysis for multi-language source code. Outputs findings as…

perlun/sudo-1.8.3p1-patched

Custom version of sudo 1.8.3p1 with CVE-2021-3156 patches applied

parikhakshat/autoharness

A tool that automatically creates fuzzing harnesses based on a library

rog3rsm1th/frelatage

Coverage-based fuzzer for python applications

mindpatch/vulfy

🐺 Vulfy – Fast Rust based package version scanner

vinsontang1/dcvd

The code in "DCVD: Dual-Channel Cross-Modal Fusion for Joint Vulnerability Detection and Localization"

simota/nginx-rift-scanner

Detect-only scanner for CVE-2026-42945 (NGINX Rift), a heap overflow in ngx_http_rewrite_module. Version detection + nginx.conf pattern analysis.…

nskath/cve-2024-21513

PoC for CVE-2024-21513

sj/web2py-e94946d-cve-2016-3957

web2py/web2py @ e94946d