Gather and update all available and newest CVEs with their PoC.
Java漏洞学习笔记 Deserialization Vulnerability
🔪Browser logic vulnerabilities ☠️
These are my checklists which I use during my hunting.
JAVA 漏洞靶场 (Vulnerability Environment For Java)
Android application fuzzing framework with fuzzers and crash monitor.
A Web Vulnerability Scanner and Patcher
A Trivy plugin that scans and outputs the results (vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more) to an interactive html file.
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Daily archiver & triage issue creator for new releases of CISA's Known Exploited Vulnerabilities list
Examples of different vulnerabilities, in a variety of languages, shapes and sizes.
Blockchain Attack Vectors & Vulnerabilities to Smart Contracts
xRay is a fairly powerful scanner that will allow you to scan and scout targets
Simple Honeypot for Atlassian Confluence (CVE-2022-26134)
Some simple charts for listing CVSS by version for various packages.
Examples of some features and the vulnerabilities that can exploit any webpage if target="_blank" is used without rel="noopener"
Exploiting Edge's read:// urlhandler
Add a description, image, and links to the vulnerability topic page so that developers can more easily learn about it.
To associate your repository with the vulnerability topic, visit your repo's landing page and select "manage topics."