Vulnerability Libraries

31 Components & Libraries

Sortby

Vulnerability Libraries

the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.

GDA, an powerful Dalvik bytecode decompiler implemented in C++, which has the advantages of fast analysis and low memory&disk consumption and an stronger ability to decompiling the apk, dex, odex…

DevSecOps, ASPM, Vulnerability Management. All on one platform.

DefectDojo is maintained by: Core Moderators can help you with pull requests or feedback on dev ideas: Moderators can help you with pull requests or feedback on dev ideas:

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.

Safety CLI is a Python dependency vulnerability scanner designed to enhance software supply chain security by detecting packages with known vulnerabilities and malicious packages in local development…

An XSS exploitation command-line interface and payload generator.

toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting (XSS) vulnerabilities. It consists of an https server that works as an interpreter for…

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 200 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

CVE Binary Tool uses the NVD API but is not endorsed or certified by the NVD. The tool has two main modes of operation: It is intended to be used as part of your continuous integration system to enab…

hack tools

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically. AutoPWN Suite has a very user friendly easy to read output. You can install it using pip. (sudo recommend…

Proof of concept for abusing Telegram's "People Near Me" feature and tracking people's location

Which is, in my opinion, an understatement. Using this technique combined with GPS spoofing, we can determine a user's whereabouts by taking multiple samples of locations and distances relative to ou…

JF⚡can - Super fast port scanning & service discovery using Masscan and Nmap. Scan large networks with Masscan and use Nmap's scripting abilities to discover information about services. Generate report.

JFScan is a wrapper that leverages the speed of Masscan and Nmap's fingerprinting capabilities. JFScan accepts targets in the form of URLs, domains, or IPs (including CIDR). You can specify a file wi…

swiss army knife for hackers

Detect, analyze and uniquely identify crashes in Windows applications

Detect, analyze and uniquely identify application bugs. Do you... ...then BugId may be for you! To use BugId, please download and install the following software: If you install Python and Debugging T…

Finds security holes in your Python projects from PyCharm and GitHub

A plugin to run security checks for common flaws in Python code and suggest quick fixes. Check out the webinar for a full demo of the functionality in this plugin: This plugin will check the installe…

Web Scan Lazy Tools - Python Package

🐸 Scans your Git repository with JFrog Xray for security vulnerabilities. 🤖

JFrog Frogbot is a Git bot that scans your Git repositories for security vulnerabilities. You can show people that your repository is scanned by Frogbot by adding a badge to the README of your Git re…

Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration

A linux vulnerability scanner based on Vulners Audit API and Salt Open, with Slack notifications and JIRA integration. Note: Salt Master and Minion versions should match. Salt-Scanner supports Salt v…

The "bane" Python library stands out as a robust toolkit catering to a wide spectrum of cybersecurity and networking tasks. Its versatile range of functionalities covers various aspects, including bruteforce attacks, cryptographic methods, DDoS attacks, information gathering, botnet creation and management, and CMS vulnerability scanning and more..

"Oh, you think darkness is your ally. But you merely adopted the dark; I was born in it, molded by it. I didn't see the light until I was already a man, by then it was nothing to me but BLINDING! The…

Python script that collects SSL/TLS information from hosts

It's a simple script running in Python that collects SSL/TLS information and then returns the group of information in JSON. It can also connect through your specified SOCKS server. One of the good th…

Fast and customizable vulnerability scanner For JIRA written in Python

Jira-Lens 🔍 is a Python Based vulnerability Scanner for JIRA. Jira is a proprietary issue tracking product developed by Atlassian that allows bug tracking and agile project management. This tool Perf…

All in One Recon Tool for Bug Bounty

The purpouse of this tool is helping bug hunters and pentesters during reconnaissance It can be used in any system with python3 You can easily install AORT using pip: If you want to install it from s…

ADAPT is a tool that performs automated Penetration Testing for WebApps.

ADAPT uses Python to create an automated framework to use industry standard tools, such as OWASP ZAP and Nmap, to perform repeatable, well-designed procedures with anticipated results to create an ea…

A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python

Vailyn is a multi-phased vulnerability analysis and exploitation tool for path traversal and file inclusion vulnerabilities. It is built to make it as performant as possible, and to offer a wide arse…

A web crawler (for bug hunting) that gathers more than you can imagine.

N.Y.A.W.C is a Python library that enables you to test your payload against all requests of a certain domain. It crawls all requests (e.g. GET, POST or PUT) in the specified scope and keeps track of …

It's a simple tool for test vulnerability shellshock

Shellshock, also known as Bashdoor, is a family of security bugs in the Unix Bash shell, the first of which was disclosed on 24 September 2014. Shellshock could enable an attacker to cause Bash to ex…

LFITester is a Python3 program that automates the detection and exploitation of Local File Inclusion (LFI) vulnerabilities on a server.

• This tool is for educational purposes only. • We are not responsible for any illegal usage of this tool. LFITester is a Python3 tool which tests if a server is vulnerable to Local File Inclusion (L…

python-deserialization-attack-payload-generator

Peas create serialized payload for deserialization RCE attack on python driven applications where pickle ,pyYAML, ruamel.yaml or jsonpickle module is used for deserialization of serialized data. I will update it with more attack vectors to targets other modules.

Version : 2.3

Uses python3.10, Debian, python-Nmap, OpenaAI, and flask framework to create a Nmap API that can do scans with a good speed online and is easy to deploy. This is a implementation for our college PCL project which is still under development and constantly updating.

Uses python3.10, Debian, python-Nmap, and flask framework to create an Nmap API that can do scans with a good speed online and is easy to deploy. This is an implementation for our college PCL project…

XsSCan | Web Application XSS Scanner | Coded By Sir.4m1R [Mr.Hidden]

Type the following in the terminal. The tool works on Python 2.7 and you should have mechanize installed. If mechanize is not installed, type "pip install mechanize" in the terminal. XsSCan is a pyth…

Related tags