Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

Advanced vulnerability scanning with Nmap NSE

使用docker快速搭建各大漏洞靶场，目前可以一键搭建17个靶场。

1、点击“检测漏洞”，会自动检测该URL是否存在S2-001、S2-005、S2-009、S2-013、S2-016、S2-019、S2-020/021、S2-032、S2-037、DevMode、S2-045/046、S2-052、S2-048、S2-053、S2-057、S2-061、S2相关log4j2十余种漏洞。 2、“批量验证”，（为防止批量geshell，此功能已经删除，并不再开发）。 3、S2-020、S2-021仅提供漏洞扫描功能，因漏洞利用exp很大几率造成网站访问异常，本程序暂不提供。 4、对于需要登录的页面，请勾选“设置全局Cookie值”，并填好相应的Cookie，程序每次发包都会带上Cookie。 5、作者对不同的struts2漏洞测试语句做了大量修改，执行

some vul

Vulnerabilities of Goby supported with exploitation.

vulscan 扫描系统：最新的poc&exp漏洞扫描，redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...

Struts2系列漏洞检查工具

国光的手把手带你用 SSRF 打穿内网靶场源码

漏洞扫描：st2、tomcat、未授权访问等等

VulsRepo is visualized based on the json report output in vuls.

java unserialize vul for weblogic exploit

加解密逻辑漏洞靶场

This is the Pwn2Own 2017 Safari backup vul's exploit.

VulSeeker: A Semantic Learning Based Vulnerability Seeker For Cross-Platform Binary

Abandoned - fastjson 1.2.24-1.2.80 poc & vulns env & how to check vul

Scan your EC2 instance to find its vulnerabilities using Vuls (https://vuls.io/en/)

Multicast DNS and DNS service discovery daemons deployed on various systems across the Internet are misconfigured and reply to queries targeting their unicast addresses, including requests from their WAN interface. These daemons could be leveraged by attackers for sensitive information disclosure and potentially used in DDoS campaigns for reflection and in some cases amplification. This vulnerability was made public in cordination with CERT (http://www.kb.cert.org/vuls/id/550620)

Easy setup tool for Vuls

A vul-finder for loading CPG and automated finding vul-call-chains

Vulnerability information query tool on the terminal.

收集整理一些漏洞，利用方法，poc等等，方便快速查阅

供测试的漏洞APP

Automatic Web Vulnerability Scanner.

New On Live Web Vul Scan

A script for adding hyperlinks to a "Halls of Arden Vul" PDF

Exploit for CVE-2020-15778(OpenSSH vul)

VulScanner - is a powerful, multi-faceted tool designed for security professionals, developers, and penetration testers to perform automated security assessments of web applications.

主要是收集自己编写、改造的一些小的脚本:ip-reverse-to-domain| findSubDomains| Shodan| ZoomEye| Censys|ecshop|vul-info-collect|cve_for_today|telnet