Open Source Security Arsenal

PoC-in-GitHub 📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

cve Gather and update all available and newest CVEs with their PoC.

awesome-hacker-search-engines A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

apple-knowledge A collection of reverse engineered Apple things, as well as a machine-readable database of Apple hardware

getsploit Search and download public exploits from the Vulners database — online, or fully offline from a local SQLite FTS5 index.

Findsploit Find exploits in local and online databases instantly

libc-database Build a database of libc offsets to simplify exploitation

NoSQLMap Automated NoSQL database enumeration and web application exploitation tool.

nmap-vulners Nmap NSE scripts that turn a service scan into CVEs, CVSS scores and known exploits — fingerprints software from HTTP responses and checks every detected CPE against the Vulners database.

K8tools K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

w9scan Plug-in type web vulnerability scanner

Web-Cache-Vulnerability-Scanner Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).