Vulnerability Libraries

33 Components & Libraries

Sortby

Vulnerability Libraries

Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution

Ensure you have Python 3.x installed on your system. Install the required Python libraries by running the following command in your terminal (navigate to the project directory first): After installin…

Improper Authorization Vulnerability in Confluence Data Center and Server + bonus 🔥

Improper Authorization Vulnerability in Confluence Data Center and Server. Atlassian has alerted administrators about a critical vulnerability in Confluence. Exploiting this issue can lead to data lo…

python dependency vulnerability scanner, written in Rust.

or As of October 15, 2023: While not coding, I am a broke high school student with nothing else to do. I appreciate all the help I can get.

Uses python3.10, Debian, python-Nmap, OpenaAI, and flask framework to create a Nmap API that can do scans with a good speed online and is easy to deploy. This is a implementation for our college PCL project which is still under development and constantly updating.

Uses python3.10, Debian, python-Nmap, and flask framework to create an Nmap API that can do scans with a good speed online and is easy to deploy. This is an implementation for our college PCL project…

All in One Recon Tool for Bug Bounty

The purpouse of this tool is helping bug hunters and pentesters during reconnaissance It can be used in any system with python3 You can easily install AORT using pip: If you want to install it from s…

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically. AutoPWN Suite has a very user friendly easy to read output. You can install it using pip. (sudo recommend…

An XSS exploitation command-line interface and payload generator.

toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting (XSS) vulnerabilities. It consists of an https server that works as an interpreter for…

Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain

We support multiple deployment models: Use Packj to audit dependencies in pull requests. The quickest way to try/test Packj is using Docker. Podman is also supported for containerized (isolated) runs…

JF⚡can - Super fast port scanning & service discovery using Masscan and Nmap. Scan large networks with Masscan and use Nmap's scripting abilities to discover information about services. Generate report.

JFScan is a wrapper that leverages the speed of Masscan and Nmap's fingerprinting capabilities. JFScan accepts targets in the form of URLs, domains, or IPs (including CIDR). You can specify a file wi…

🐸 Scans your Git repository with JFrog Xray for security vulnerabilities. 🤖

JFrog Frogbot is a Git bot that scans your Git repositories for security vulnerabilities. You can show people that your repository is scanned by Frogbot by adding a badge to the README of your Git re…

Fast and customizable vulnerability scanner For JIRA written in Python

Jira-Lens 🔍 is a Python Based vulnerability Scanner for JIRA. Jira is a proprietary issue tracking product developed by Atlassian that allows bug tracking and agile project management. This tool Perf…

LFITester is a Python3 program that automates the detection and exploitation of Local File Inclusion (LFI) vulnerabilities on a server.

• This tool is for educational purposes only. • We are not responsible for any illegal usage of this tool. LFITester is a Python3 tool which tests if a server is vulnerable to Local File Inclusion (L…

It's a simple tool for test vulnerability shellshock

Shellshock, also known as Bashdoor, is a family of security bugs in the Unix Bash shell, the first of which was disclosed on 24 September 2014. Shellshock could enable an attacker to cause Bash to ex…

Proof of concept for abusing Telegram's "People Near Me" feature and tracking people's location

Which is, in my opinion, an understatement. Using this technique combined with GPS spoofing, we can determine a user's whereabouts by taking multiple samples of locations and distances relative to ou…

A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python

Vailyn is a multi-phased vulnerability analysis and exploitation tool for path traversal and file inclusion vulnerabilities. It is built to make it as performant as possible, and to offer a wide arse…

Web Scan Lazy Tools - Python Package

Finds security holes in your Python projects from PyCharm and GitHub

A plugin to run security checks for common flaws in Python code and suggest quick fixes. Check out the webinar for a full demo of the functionality in this plugin: This plugin will check the installe…

You guessed well, genius !! This tool is intended for the initiation to ethical hacking with python

Additional options for attacks (e.g. DNS poisoning) and post-exploitation will be added in the future. This tool is currently divided into four packages: Any of these packages can be extended with ne…

The "bane" Python library stands out as a robust toolkit catering to a wide spectrum of cybersecurity and networking tasks. Its versatile range of functionalities covers various aspects, including bruteforce attacks, cryptographic methods, DDoS attacks, information gathering, botnet creation and management, and CMS vulnerability scanning and more..

"Oh, you think darkness is your ally. But you merely adopted the dark; I was born in it, molded by it. I didn't see the light until I was already a man, by then it was nothing to me but BLINDING! The…

python-deserialization-attack-payload-generator

Peas create serialized payload for deserialization RCE attack on python driven applications where pickle ,pyYAML, ruamel.yaml or jsonpickle module is used for deserialization of serialized data. I will update it with more attack vectors to targets other modules.

Version : 2.3

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 200 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

CVE Binary Tool uses the NVD API but is not endorsed or certified by the NVD. The tool has two main modes of operation: It is intended to be used as part of your continuous integration system to enab…

swiss army knife for hackers

ADAPT is a tool that performs automated Penetration Testing for WebApps.

ADAPT uses Python to create an automated framework to use industry standard tools, such as OWASP ZAP and Nmap, to perform repeatable, well-designed procedures with anticipated results to create an ea…

Python script that collects SSL/TLS information from hosts

It's a simple script running in Python that collects SSL/TLS information and then returns the group of information in JSON. It can also connect through your specified SOCKS server. One of the good th…

the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.

GDA, an powerful Dalvik bytecode decompiler implemented in C++, which has the advantages of fast analysis and low memory&disk consumption and an stronger ability to decompiling the apk, dex, odex…

Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration

A linux vulnerability scanner based on Vulners Audit API and Salt Open, with Slack notifications and JIRA integration. Note: Salt Master and Minion versions should match. Salt-Scanner supports Salt v…