The Top 136 Vulnerability Open Source Projects

Awesome Open Source

Awesome Open Source

Combined Topics

vulnerability x

Advertising 📦 10

Application Programming Interfaces 📦 124

Applications 📦 192

Artificial Intelligence 📦 78

Blockchain 📦 73

Build Tools 📦 113

Cloud Computing 📦 80

Code Quality 📦 28

Collaboration 📦 32

Command Line Interface 📦 49

Community 📦 83

Companies 📦 60

Compilers 📦 63

Computer Science 📦 80

Configuration Management 📦 42

Content Management 📦 175

Control Flow 📦 213

Data Formats 📦 78

Data Processing 📦 276

Data Storage 📦 135

Economics 📦 64

Frameworks 📦 215

Graphics 📦 110

Hardware 📦 152

Integrated Development Environments 📦 49

Learning Resources 📦 166

Libraries 📦 129

Lists Of Projects 📦 22

Machine Learning 📦 347

Mapping 📦 64

Marketing 📦 15

Mathematics 📦 55

Messaging 📦 98

Networking 📦 315

Operating Systems 📦 89

Operations 📦 121

Package Managers 📦 55

Programming Languages 📦 245

Runtime Environments 📦 100

Science 📦 42

Security 📦 396

Social Media 📦 27

Software Architecture 📦 72

Software Development 📦 72

Software Performance 📦 58

Software Quality 📦 133

Text Editors 📦 49

Text Processing 📦 136

User Interface 📦 330

User Interface Components 📦 514

Version Control 📦 30

Virtualization 📦 71

Web Browsers 📦 42

Web Servers 📦 26

Web User Interface 📦 210

The Top 136 Vulnerability Open Source Projects

Categories > Security > Vulnerability

Payloadsallthethings ⭐ 23,594

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

H4cker ⭐ 9,311

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

Trivy ⭐ 7,045

A Simple and Comprehensive Vulnerability Scanner for Container Images, Git Repositories and Filesystems. Suitable for CI

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

Ysoserial ⭐ 4,049

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Faraday ⭐ 2,955

Collaborative Penetration Test and Vulnerability Management Platform

Exphub ⭐ 2,526

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

Howtohunt ⭐ 2,369

Tutorials and Things to Do while Hunting Vulnerability.

Js Vuln Db ⭐ 1,972

A collection of JavaScript engine CVEs with PoCs

Vulscan ⭐ 1,968

Advanced vulnerability scanning with Nmap NSE

Springbootvulexploit ⭐ 1,807

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.

Dockle ⭐ 1,486

Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start

Fuzz.txt ⭐ 1,401

Potentially dangerous files

Ssrfmap ⭐ 1,378

Automatic SSRF fuzzer and exploitation tool

Trackray ⭐ 1,335

溯光 (TrackRay) 3 beta⚡渗透测试框架（资产扫描|指纹识别|暴力破解|网页爬虫|端口扫描|漏洞扫描|代码审计|AWVS|NMAP|Metasploit|SQLMap）

Pentest Guide ⭐ 1,333

Penetration tests guide based on OWASP including test cases, resources and examples.

Reverse Shell ⭐ 1,304

Reverse Shell as a Service

Vulstudy ⭐ 1,274

使用docker快速搭建各大漏洞靶场，目前可以一键搭建17个靶场。

Vulnx ⭐ 1,196

vulnx 🕷️ is an intelligent bot auto shell injector that detect vulnerabilities in multiple types of cms { `wordpress , joomla , drupal , prestashop .. `}

Hacking Resources ⭐ 1,165

Hacking resources and cheat sheets. References, tools, scripts, tutorials, and other resources that help offensive and defensive security professionals.

Vulnwhisperer ⭐ 1,122

Create actionable data from your Vulnerability Scans

Penetration Testing Platform

Openvas Scanner ⭐ 1,105

This repository contains the scanner component for Greenbone Vulnerability Management (GVM). If you are looking for the whole OpenVAS framework please take a look at https://community.greenbone.net/t/frequently-asked-questions-faq/5558.

Vulnerability Labs for security analysis

Whitewidow ⭐ 928

SQL Vulnerability Scanner

Blackwidow ⭐ 898

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

V3n0m Scanner ⭐ 859

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

The Correlated CVE Vulnerability And Threat Intelligence Database API

Bad Pdf ⭐ 755

Steal Net-NTLM Hash using Bad-PDF

Command Injection Payload List ⭐ 686

🎯 Command Injection Payload List

Herpaderping ⭐ 652

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

Singularity ⭐ 623

A DNS rebinding attack framework.

Damn Vulnerable Graphql Application ⭐ 604

Damn Vulnerable GraphQL Application is an intentionally vulnerable implementation of Facebook's GraphQL technology, to learn and practice GraphQL Security.

Esfileexploreropenportvuln ⭐ 596

ES File Explorer Open Port Vulnerability - CVE-2019-6447

Uxss Db ⭐ 578

🔪Browser logic vulnerabilities ☠️

Secdevlabs ⭐ 560

A laboratory for learning secure web and mobile development in a practical manner.

OPCDE Cybersecurity Conference Materials

Auto Scanning to SSL Vulnerability

Hack Tools ⭐ 510

Vulscan ⭐ 487

vulscan 扫描系统：最新的poc&exp漏洞扫描，redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...

Proofs-of-concept

Solr Injection ⭐ 469

Apache Solr Injection Research

The hackers tool belt

A vulnerability scanner for container images and filesystems

Hardware And Firmware Security Guidance ⭐ 428

Guidance for the Spectre, Meltdown, Speculative Store Bypass, Rogue System Register Read, Lazy FP State Restore, Bounds Check Bypass Store, TLBleed, and L1TF/Foreshadow vulnerabilities as well as general hardware and firmware security guidance. #nsacyber

Hacking ⭐ 420

hacker, ready for more of our story ! 🚀

0day Security Software Vulnerability Analysis Technology ⭐ 400

0day安全_软件漏洞分析技术

A Red Teamer Diaries ⭐ 391

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

Iot Vulhub ⭐ 373

IoT 固件漏洞复现环境

Docker Vulnerability Environment ⭐ 370

Use the docker to build a vulnerability environment

Javadeserh2hc ⭐ 364

Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).

Simple DNS Rebinding Service

Iblessing ⭐ 341

iblessing is an iOS security exploiting toolkit, it mainly includes application information collection, static analysis and dynamic analysis. It can be used for reverse engineering, binary analysis and vulnerability mining.

A sane API for IDA Pro's decompiler. Useful for malware RE and vulnerability research

Android Kernel Exploitation ⭐ 319

Android Kernel Exploitation

Vulners Python API wrapper

Joint Advanced Defect assEsment for android applications

Go Web Application Penetration Test

OWASP VBScan is a Black Box vBulletin Vulnerability Scanner

Vulnerable Node ⭐ 283

A very vulnerable web site written in NodeJS with the purpose of have a project with identified vulnerabilities to test the quality of security analyzers tools tools

Application Security Engineer Interview Questions ⭐ 278

Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer

Shiro_exploit ⭐ 268

Apache Shiro 反序列化漏洞检测与利用工具

Droid Hunter ⭐ 258

(deprecated) Android application vulnerability analysis and Android pentest tool

Ary 是一个集成类工具，主要用于调用各种安全工具，从而形成便捷的一键式渗透。

Droid Application Fuzz Framework ⭐ 251

Android application fuzzing framework with fuzzers and crash monitor.

Awsome Security Write Ups And Pocs ⭐ 247

Awesome Writeups and POCs

Killshot ⭐ 243

A Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner

Api Fuzzer ⭐ 241

API Fuzzer which allows to fuzz request attributes using common pentesting techniques and lists vulnerabilities

Php7 Opcache Override ⭐ 237

Security-related PHP7 OPcache abuse tools and demo

CLI to integrate continuous fuzzing with Fuzzit

Vulnerability Notes, PoC Exploits and Write-Ups for security issues disclosed by tintinweb

Gemsurance ⭐ 208

Gem vulnerability checker using rubysec/ruby-advisory-db

Vulnfanatic ⭐ 204

A Binary Ninja plugin for vulnerability research.

SlowMist Vulnerability Research Advisories

Javalearnvulnerability ⭐ 187

Java漏洞学习笔记 Deserialization Vulnerability

List of real-world threats against endpoint protection software

Damn Vulnerable Hybrid Mobile App (DVHMA) is an hybrid mobile app (for Android) that intentionally contains vulnerabilities.

ADAPT is a tool that performs automated Penetration Testing for WebApps.

Godnslog ⭐ 179

An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability

Cve Check Tool ⭐ 174

Original Automated CVE Checking Tool

Vulnerability (CVE) scanner for Nix/NixOS.

Zeebsploit ⭐ 160

web scanner - exploitation - information gathering

Phpvuln ⭐ 160

Audit tool to find common vulnerabilities in PHP source code

Burp Retire Js ⭐ 159

Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries.

Magevulndb ⭐ 153

List of Magento extensions with known security issues.

Vulnerability Database | huntr.dev

A vulnerable iOS App with Security Challenges for the Security Researcher inside you.

Exploit Framework ⭐ 146

🔥 An Exploit framework for Web Vulnerabilities written in Python

Linuxflaw ⭐ 141

This repo records all the vulnerabilities of linux software I have reproduced in my local workspace

Greenbone Vulnerability Manager - The database backend for the Greenbone Vulnerability Management (GVM) framework

Wprecon ⭐ 140

WPrecon (WordPress Recon), is a vulnerability recognition tool in CMS Wordpress, developed in Go and with scripts in Lua.

Wordpress Scanner ⭐ 138

Wordpress Vulnerability Scanner

Spectre Meltdown Poc ⭐ 127

A semi-demi-working proof of concept for a mix of spectre and meltdown vulnerabilities

Vulnerablecode ⭐ 125

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode

Fortiscan ⭐ 125

A high performance FortiGate SSL-VPN vulnerability scanning and exploitation tool.

Spring Boot Upload File Lead To Rce Tricks ⭐ 125

spring boot Fat Jar 应用文件上传漏洞到 RCE 的利用技巧

Safiler ⭐ 119

Safari local file reader

Gvm Docker ⭐ 115

A Docker Image For Greenbone Vulnerability Management with OpenVAS

Arissploit ⭐ 114

Arissploit Framework is a simple framework designed to master penetration testing tools. Arissploit Framework offers simple structure, basic CLI, and useful features for learning and developing penetration testing tools.

1-100 of 136 projects

Advertising 📦 10

Application Programming Interfaces 📦 124

Applications 📦 192

Artificial Intelligence 📦 78

Blockchain 📦 73

Build Tools 📦 113

Cloud Computing 📦 80

Code Quality 📦 28

Collaboration 📦 32

Command Line Interface 📦 49

Community 📦 83

Companies 📦 60

Compilers 📦 63

Computer Science 📦 80

Configuration Management 📦 42

Content Management 📦 175

Control Flow 📦 213

Data Formats 📦 78

Data Processing 📦 276

Data Storage 📦 135

Economics 📦 64

Frameworks 📦 215

Graphics 📦 110

Hardware 📦 152

Integrated Development Environments 📦 49

Learning Resources 📦 166

Libraries 📦 129

Lists Of Projects 📦 22

Machine Learning 📦 347

Mapping 📦 64

Marketing 📦 15

Mathematics 📦 55

Messaging 📦 98

Networking 📦 315

Operating Systems 📦 89

Operations 📦 121

Package Managers 📦 55

Programming Languages 📦 245

Runtime Environments 📦 100

Science 📦 42

Security 📦 396

Social Media 📦 27

Software Architecture 📦 72

Software Development 📦 72

Software Performance 📦 58

Software Quality 📦 133

Text Editors 📦 49

Text Processing 📦 136

User Interface 📦 330

User Interface Components 📦 514

Version Control 📦 30

Virtualization 📦 71

Web Browsers 📦 42

Web Servers 📦 26

Web User Interface 📦 210