sss3
halencarjunior/sss3Automated S3 bucket security scanner that tests domain lists for publicly accessible buckets with listing permissions, exporting results for cloud…
cloud-securityinformation-gatheringpenetration-testing+1
32
halencarjunior/sss3Automated S3 bucket security scanner that tests domain lists for publicly accessible buckets with listing permissions, exporting results for cloud…
vladko312/sstimapAutomatic SSTI detection tool with interactive interface
georgiaw/smartphone-pentest-frameworkRepository for the Smartphone Pentest Framework (SPF)
enessar/libpng_oss-fuzzSecurity research project on fuzzing libpng with OSS-Fuzz. Includes seed corpus analysis, custom read/write fuzzers, and a proof-of-concept exploit…
shyam999/athanasiusFramework for penetration testing. The software can identify everything from cross-site scripting to SQL injection. Developers can also use this…
google/oss-fuzzOSS-Fuzz - continuous fuzzing for open source software.
mekoko/cve-2020-4276Proof-of-concept exploit for CVE-2020-4276, targeting a specific vulnerability in affected software for security testing and validation.
iotsrg/iot-pentest-devices-and-purposeCurated guide to IoT penetration testing hardware and software tools for 2025, covering Bluetooth, Zigbee, Z-Wave, WiFi, RFID, automotive, and…
gkweb76/exploitsCollection of shellcode and proof-of-concept exploits for known vulnerabilities, intended for local testing and verifying software or network…
ewilded/cve-2024-35315-pocProof-of-concept exploit for CVE-2024-35315, demonstrating local privilege escalation in Mitel Collab software. Intended for security testing and…
lilang-wu/poc-cve-2018-4411Proof-of-concept exploit for CVE-2018-4411, demonstrating a specific vulnerability in Apple software. Intended for security testing and educational…
renode/renodeOpen-source simulation framework for developing, testing, and debugging unmodified software for multi-node embedded and IoT systems, supporting ARM,…
owasp/opencreInteractive platform linking security standards and guidelines for designing, developing, testing, and procuring secure software. Provides a unified…
smythtech/sdnpwnAn SDN penetration testing toolkit
shoucheng3/apache__jspwiki_cve-2022-46907_2-11-3Exploit module for Apache JSPWiki CVE-2022-46907, targeting a Java-based wiki platform with JAAS security integration. Provides vulnerability…
owasp/tcasvsOWASP Thick Client Application Security Verification Standard
graysignal/cve-2024-23897-jenkins-arbitrary-read-file-vulnerabilityUnauthenticated Jenkins CLI exploit scanner for CVE-2024-23897 that detects vulnerable versions and reads arbitrary files from the controller through…
crypticq/cloudme_b0fProof-of-concept exploit for CVE-2018-6892 targeting a buffer overflow vulnerability in CloudMe software. Demonstrates exploitation technique for…