Awesome Open Source
Awesome Open Source
Combined Topics
vulnerability x
Advertising 📦 9
All Projects
Application Programming Interfaces 📦 120
Applications 📦 181
Artificial Intelligence 📦 72
Blockchain 📦 70
Build Tools 📦 111
Cloud Computing 📦 79
Code Quality 📦 28
Collaboration 📦 30
Command Line Interface 📦 48
Community 📦 81
Companies 📦 60
Compilers 📦 60
Computer Science 📦 74
Configuration Management 📦 39
Content Management 📦 167
Control Flow 📦 197
Data Formats 📦 77
Data Processing 📦 266
Data Storage 📦 132
Economics 📦 60
Frameworks 📦 198
Games 📦 122
Graphics 📦 103
Hardware 📦 148
Integrated Development Environments 📦 47
Learning Resources 📦 147
Legal 📦 28
Libraries 📦 119
Lists Of Projects 📦 21
Machine Learning 📦 336
Mapping 📦 61
Marketing 📦 15
Mathematics 📦 55
Media 📦 228
Messaging 📦 97
Networking 📦 304
Operating Systems 📦 84
Operations 📦 120
Package Managers 📦 52
Programming Languages 📦 229
Runtime Environments 📦 96
Science 📦 42
Security 📦 375
Social Media 📦 26
Software Architecture 📦 70
Software Development 📦 68
Software Performance 📦 57
Software Quality 📦 127
Text Editors 📦 45
Text Processing 📦 131
User Interface 📦 310
User Interface Components 📦 465
Version Control 📦 29
Virtualization 📦 68
Web Browsers 📦 38
Web Servers 📦 25
Web User Interface 📦 194

The Top 825 Vulnerability Open Source Projects on Github

Categories > Security > Vulnerability
Payloadsallthethings ⭐ 30,112
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Hacker101 ⭐ 12,104
Source code for Hacker101.com - a free online web and mobile security class.
H4cker ⭐ 10,067
This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.
Vuls ⭐ 8,686
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
Trivy ⭐ 8,523
Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues
Clair ⭐ 8,145
Vulnerability Static Analysis for Containers
Hacker Roadmap ⭐ 6,715
📌 Your beginner pen-testing start guide. A guide for amateur pen testers and a collection of hacking tools, resources and references to practice ethical hacking and web security.
Oss Fuzz ⭐ 6,667
OSS-Fuzz - continuous fuzzing for open source software.
Brakeman ⭐ 6,209
A static analysis security vulnerability scanner for Ruby on Rails applications
Xray ⭐ 5,828
一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档
Clusterfuzz ⭐ 4,568
Scalable fuzzing infrastructure.
Ysoserial ⭐ 4,492
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
Awesome Web Hacking ⭐ 3,577
A list of web application security
Snyk ⭐ 3,379
Snyk CLI scans and monitors your projects for security vulnerabilities.
Kube Hunter ⭐ 3,189
Hunt for security weaknesses in Kubernetes clusters
Vulapps ⭐ 3,177
快速搭建各种漏洞环境(Various vulnerability environment)
Faraday ⭐ 3,102
Collaborative Penetration Test and Vulnerability Management Platform
Howtohunt ⭐ 2,860
Tutorials and Things to Do while Hunting Vulnerability.
Retire.js ⭐ 2,806
scanner detecting the use of JavaScript libraries with known vulnerabilities
Exphub ⭐ 2,458
Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340
Vulscan ⭐ 2,069
Advanced vulnerability scanning with Nmap NSE
Js Vuln Db ⭐ 1,817
A collection of JavaScript engine CVEs with PoCs
Archerysec ⭐ 1,737
Centralize Vulnerability Assessment and Management for DevSecOps Team
Awesome Nodejs Security ⭐ 1,724
Awesome Node.js Security resources
Cve Search ⭐ 1,720
cve-search - a tool to perform local searches for known vulnerabilities
Vulmap ⭐ 1,710
Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能
Security Advisories ⭐ 1,692
A database of PHP security advisories
Reconftw ⭐ 1,646
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
Dockle ⭐ 1,642
Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start
Is Website Vulnerable ⭐ 1,627
finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
Ssrfmap ⭐ 1,472
Automatic SSRF fuzzer and exploitation tool
Hacksysextremevulnerabledriver ⭐ 1,471
HackSys Extreme Vulnerable Windows Driver
Xvwa ⭐ 1,468
XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.
Nodegoat ⭐ 1,462
The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.
Fuzz.txt ⭐ 1,439
Potentially dangerous files
Pentest Guide ⭐ 1,387
Penetration tests guide based on OWASP including test cases, resources and examples.
Trackray ⭐ 1,352
溯光 (TrackRay) 3 beta⚡渗透测试框架（资产扫描|指纹识别|暴力破解|网页爬虫|端口扫描|漏洞扫描|代码审计|AWVS|NMAP|Metasploit|SQLMap）
Anchore Engine ⭐ 1,324
A service that analyzes docker images and applies user-defined acceptance policies to allow automated container image validation and certification
Openvas Scanner ⭐ 1,317
This repository contains the scanner component for Greenbone Vulnerability Management (GVM). If you are looking for the whole OpenVAS framework please take a look at https://community.greenbone.net/t/frequently-asked-questions-faq/5558.
Jaeles ⭐ 1,297
The Swiss Army knife for automated Web Application Testing
Vulnx ⭐ 1,273
vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.
Hacking Resources ⭐ 1,225
Hacking resources and cheat sheets. References, tools, scripts, tutorials, and other resources that help offensive and defensive security professionals.
Reverse Shell ⭐ 1,178
Reverse Shell as a Service
Vulnwhisperer ⭐ 1,127
Create actionable data from your Vulnerability Scans
Fuxi ⭐ 1,124
Penetration Testing Platform
V3n0m Scanner ⭐ 955
Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns
Labs ⭐ 939
Vulnerability Labs for security analysis
Blackwidow ⭐ 935
A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
Whitewidow ⭐ 903
SQL Vulnerability Scanner
Rapidscan ⭐ 896
🆕 The Multi-Tool Web Vulnerability Scanner.
Vulstudy ⭐ 876
使用docker快速搭建各大漏洞靶场，目前可以一键搭建17个靶场。
Learn365 ⭐ 869
This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.
Dependency Track ⭐ 865
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
Dagda ⭐ 849
a tool to perform static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers and to monitor the docker daemon and running docker containers for detecting anomalous activities
Opencve ⭐ 839
CVE Alerting Platform
Vfeed ⭐ 830
The Correlated CVE Vulnerability And Threat Intelligence Database API
Binexp ⭐ 828
Linux Binary Exploitation
Grype ⭐ 785
A vulnerability scanner for container images and filesystems
Not So Smart Contracts ⭐ 764
Examples of Solidity security issues
Bad Pdf ⭐ 763
Steal Net-NTLM Hash using Bad-PDF
Damn Vulnerable Graphql Application ⭐ 751
Damn Vulnerable GraphQL Application is an intentionally vulnerable implementation of Facebook's GraphQL technology, to learn and practice GraphQL Security.
Railsgoat ⭐ 745
A vulnerable version of Rails that follows the OWASP Top 10
Ossa ⭐ 711
Open-Source Security Architecture | 开源安全架构
Command Injection Payload List ⭐ 700
🎯 Command Injection Payload List
Esp32_esp8266_attacks ⭐ 691
Proof of Concept of ESP32/8266 Wi-Fi vulnerabilties (CVE-2019-12586, CVE-2019-12587, CVE-2019-12588)
Exploit Writeups ⭐ 678
A collection where my current and future writeups for exploits/CTF will go
Pwndoc ⭐ 664
Pentest Report Generator
Pocassist ⭐ 661
全新的开源漏洞测试框架，实现poc在线编辑、运行、批量测试。使用文档：
Dawnscanner ⭐ 651
Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
Esfileexploreropenportvuln ⭐ 634
ES File Explorer Open Port Vulnerability - CVE-2019-6447
Singularity ⭐ 624
A DNS rebinding attack framework.
Secdevlabs ⭐ 603
A laboratory for learning secure web and mobile development in a practical manner.
Kernelpop ⭐ 594
kernel privilege escalation enumeration and exploitation framework
Uxss Db ⭐ 580
🔪Browser logic vulnerabilities ☠️
Npq ⭐ 567
🎖safely* install packages with npm or yarn by auditing them as part of your install process
External Protocol Flooding ⭐ 551
Scheme flooding vulnerability: how it works and why it is a threat to anonymous browsing
Opcde ⭐ 551
OPCDE Cybersecurity Conference Materials
Horusec ⭐ 520
Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.
Hack Tools ⭐ 507
hack tools
A2sv ⭐ 506
Auto Scanning to SSL Vulnerability
Siet ⭐ 478
Smart Install Exploitation Tool
Advisory Db ⭐ 477
Security advisory database for Rust crates published through crates.io
Wordpresscan ⭐ 477
WPScan rewritten in Python + some WPSeku ideas
Iot Vulhub ⭐ 470
IoT 固件漏洞复现环境
Solr Injection ⭐ 469
Apache Solr Injection Research
Hardware And Firmware Security Guidance ⭐ 449
Guidance for the Spectre, Meltdown, Speculative Store Bypass, Rogue System Register Read, Lazy FP State Restore, Bounds Check Bypass Store, TLBleed, and L1TF/Foreshadow vulnerabilities as well as general hardware and firmware security guidance. #nsacyber
Zip Slip Vulnerability ⭐ 444
Zip Slip Vulnerability (Arbitrary file write through archive extraction)
Huskyci ⭐ 442
Performing security tests inside your CI
K8s Security ⭐ 435
Kubernetes security notes and best practices
Kubei ⭐ 432
Kubei is a flexible Kubernetes runtime scanner, scanning images of worker and Kubernetes nodes providing accurate vulnerabilities assessment, for more information checkout:
Dnstake ⭐ 423
DNSTake — A fast tool to check missing hosted DNS zones that can lead to subdomain takeover
Pybelt ⭐ 423
The hackers tool belt
Hacking ⭐ 423
hacker, ready for more of our story ! 🚀
Poc ⭐ 421
Advisories, proof of concept files and exploits that have been made public by @pedrib.
Injuredandroid ⭐ 420
A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.
Cb Multios ⭐ 418
DARPA Challenges Sets for Linux, Windows, and macOS
Patrowlmanager ⭐ 412
PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform
Iblessing ⭐ 411
iblessing is an iOS security exploiting toolkit, it mainly includes application information gathering, static analysis and dynamic analysis. It can be used for reverse engineering, binary analysis and vulnerability mining.
Githack ⭐ 395
.git 泄漏利用工具，可还原历史版本
Vulscan ⭐ 382
vulscan 扫描系统：最新的poc&exp漏洞扫描，redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...
1-100 of 825 projects

Related Projects

Vulnerability Scanners Projects (330)
Python Vulnerability Projects (274)
Security Vulnerability Projects (252)
Exploit Vulnerability Projects (162)
Vulnerability Cve Projects (93)
Hacking Vulnerability Projects (92)
Scanner Vulnerability Projects (76)
Javascript Vulnerability Projects (72)
Python Security Vulnerability Projects (71)
Python Exploit Vulnerability Projects (68)
Pentesting Vulnerability Projects (61)
Security Tools Vulnerability Projects (60)
Php Vulnerability Projects (60)
Advertising 📦 9
All Projects
Application Programming Interfaces 📦 120
Applications 📦 181
Artificial Intelligence 📦 72
Blockchain 📦 70
Build Tools 📦 111
Cloud Computing 📦 79
Code Quality 📦 28
Collaboration 📦 30
Command Line Interface 📦 48
Community 📦 81
Companies 📦 60
Compilers 📦 60
Computer Science 📦 74
Configuration Management 📦 39
Content Management 📦 167
Control Flow 📦 197
Data Formats 📦 77
Data Processing 📦 266
Data Storage 📦 132
Economics 📦 60
Frameworks 📦 198
Games 📦 122
Graphics 📦 103
Hardware 📦 148
Integrated Development Environments 📦 47
Learning Resources 📦 147
Legal 📦 28
Libraries 📦 119
Lists Of Projects 📦 21
Machine Learning 📦 336
Mapping 📦 61
Marketing 📦 15
Mathematics 📦 55
Media 📦 228
Messaging 📦 97
Networking 📦 304
Operating Systems 📦 84
Operations 📦 120
Package Managers 📦 52
Programming Languages 📦 229
Runtime Environments 📦 96
Science 📦 42
Security 📦 375
Social Media 📦 26
Software Architecture 📦 70
Software Development 📦 68
Software Performance 📦 57
Software Quality 📦 127
Text Editors 📦 45
Text Processing 📦 131
User Interface 📦 310
User Interface Components 📦 465
Version Control 📦 29
Virtualization 📦 68
Web Browsers 📦 38
Web Servers 📦 25
Web User Interface 📦 194
"GitHub" is a registered trademark of GitHub, Inc. Awesome Open Source is not affiliated with GitHub.

All non readme contents or Github based topics or project metadata copyright Awesome Open Source 2018-2021