Topic: vulnerabilities Goto Github

👇 Here are 715 public repositories matching this topic...

0xmaximus / galaxy-bugbounty-checklist
vulnerabilities,Tips and Tutorials for Bug Bounty and also Penetration Tests.
User: 0xmaximus
bugbounty bug hackerone bugbountytricks bugbounty-tool bugbountytips bugbounty-reports bugbounty-checklist bugcrowd bugs

anchore / anchore-engine
vulnerabilities,A service that analyzes docker images and scans for vulnerabilities
Organization: anchore
docker containers security python static-analysis vulnerabilities docker-image anchore-engine dockerhub whitelist

anchore / grype
vulnerabilities,A vulnerability scanner for container images and filesystems
Organization: anchore
containers security vulnerability docker golang go static-analysis container-image tool oci cyclonedx vulnerabilities hacktoberfest openvex vex

antonio-morales / fuzzing101
vulnerabilities,An step by step fuzzing tutorial. A GitHub Security Lab initiative
User: antonio-morales
Home Page: https://securitylab.github.com/
fuzzing security bug-hunting afl fuzzilli fuzzer afl-fuzz bugbounty fuzz-testing hacking

aquasecurity / kube-hunter
vulnerabilities,Hunt for security weaknesses in Kubernetes clusters
Organization: aquasecurity
vulnerabilities kubernetes-clusters hacktoberfest

archerysec / archerysec
vulnerabilities,Automate Your Application Security Orchestration And Correlation (ASOC) Using ArcherySec.
Organization: archerysec
Home Page: https://www.archerysec.com/
vulnerability-assessment vulnerabilities scanning pentesting vulnerability-management opensource pentesters secdevops devops devops-tools

bearer / bearer
vulnerabilities,Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Organization: bearer
Home Page: https://docs.bearer.com
appsec code-quality compliance dataflow devsecops devsecops-tools gdpr owasp privacy sast security security-audit security-automation security-scanner security-tools static-analysis static-code-analysis vulnerabilities vulnerability

bloodzer0 / ossa
vulnerabilities,Open-Source Security Architecture | 开源安全架构
User: bloodzer0
Home Page: https://bloodzer0.github.io/ossa/
security security-vulnerability security-tools security-audit security-scanner ids ips business-security application-security code-audit

cdk-team / cdk
vulnerabilities,📦 Make security testing of K8s, Docker, and Containerd easier.
Organization: cdk-team
Home Page: https://github.com/cdk-team/CDK/wiki
penetration penetration-testing-tools kubernetes docker hacktools k8s-penetration-toolkit k8s linux exploits cloud-native

crytic / not-so-smart-contracts
vulnerabilities,Examples of Solidity security issues
Organization: crytic
solidity vulnerabilities ethereum

cve-search / cve-search
vulnerabilities,cve-search - a tool to perform local searches for known vulnerabilities
Organization: cve-search
Home Page: https://www.cve-search.org/
cve-search common-vulnerabilities cpe cve-databases vulnerabilities vulnerability-detection vulnerability-assessment cve cve-scanning cve-entries

dependencytrack / dependency-track
vulnerabilities,Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
Organization: dependencytrack
Home Page: https://dependencytrack.org/
owasp appsec security bom vulnerabilities component-analysis nvd software-security software-composition-analysis sca

edoardottt / awesome-hacker-search-engines
vulnerabilities,A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
User: edoardottt
Home Page: https://awesome-hacker-search-engines.com/
awesome awesome-list hacking search-engine osint awesome-lists dns hacking-tools exploit security

eliasgranderubio / dagda
vulnerabilities,a tool to perform static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers and to monitor the docker daemon and running docker containers for detecting anomalous activities
User: eliasgranderubio
docker security static-analysis vulnerabilities detecting-anomalous-activities malware-detection

friendsofphp / security-advisories
vulnerabilities,A database of PHP security advisories
Organization: friendsofphp
Home Page: https://github.com/fabpot/local-php-security-checker
composer packagist php vulnerabilities

future-architect / vuls
vulnerabilities,Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
Organization: future-architect
Home Page: https://vuls.io/
vuls vulnerability-scanners golang go linux freebsd vulnerability-detection security security-tools cybersecurity security-vulnerability security-scanner security-hardening security-automation security-audit vulnerability-assessment vulnerability-management vulnerability-scanner vulnerabilities administrator

google / clusterfuzz
vulnerabilities,Scalable fuzzing infrastructure.
Organization: google
Home Page: https://google.github.io/clusterfuzz
fuzzing security stability vulnerabilities

google / oss-fuzz
vulnerabilities,OSS-Fuzz - continuous fuzzing for open source software.
Organization: google
Home Page: https://google.github.io/oss-fuzz
fuzzing security stability oss-fuzz fuzz-testing vulnerabilities

hacksysteam / hacksysextremevulnerabledriver
vulnerabilities,HackSys Extreme Vulnerable Driver (HEVD) - Windows & Linux
User: hacksysteam
Home Page: https://hacksys.io
buffer-overflow driver exploit-development exploitation hevd info-leak kernel linux memory-corruption type-confusion uaf vulnerabilities windows

harsh-bothra / learn365
vulnerabilities,This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.
User: harsh-bothra
bugbounty community infosec vulnerabilities bugbountytips pentesting pentesting-tools learning application-security

infoslack / awesome-web-hacking
vulnerabilities,A list of web application security
User: infoslack
penetration-testing web-hacking vulnerabilities scanner hacking hacking-tools metasploit web-security appsec owasp

intel / cve-bin-tool
vulnerabilities,The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 200 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
Organization: intel
Home Page: https://cve-bin-tool.readthedocs.io/en/latest/
cve security hacktoberfest vulnerabilities cvss swrepo system-tools devsecops security-automation security-tools

jaeles-project / jaeles
vulnerabilities,The Swiss Army knife for automated Web Application Testing
Organization: jaeles-project
Home Page: https://jaeles-project.github.io/
golang hacking bugbounty jaeles web-scanner scanner infosec security-tools vulnerabilities

kaiiyer / awesome-vulnerable
vulnerabilities,A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB.
User: kaiiyer
Home Page: https://kaiiyer.github.io/awesome-vulnerable/
awesome pentest vulnerable-apps hacktoberfest bwapp lab hack vulnerable vulnerabilities penetration-skills

lirantal / awesome-nodejs-security
vulnerabilities,Awesome Node.js Security resources
User: lirantal
nodejs security cybersecurity web-security owasp vulnerabilities pentest infosec hacktoberfest

lirantal / is-website-vulnerable
vulnerabilities,finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
User: lirantal
security-vulnerabilities security vulnerabilities lighthouse scan nodejs hacktoberfest

lirantal / npq
vulnerabilities,🎖safely* install packages with npm or yarn by auditing them as part of your install process
User: lirantal
npm package-manager security-audit command-line-tool vulnerabilities security security-tools hacktoberfest

medicean / vulapps
vulnerabilities,快速搭建各种漏洞环境(Various vulnerability environment)
User: medicean
Home Page: http://vulapps.evalbug.com/
vulnerabilities docker struts vulnhub cve

metarget / metarget
vulnerabilities,Metarget is a framework providing automatic constructions of vulnerable infrastructures.
Organization: metarget
cloud-native kubernetes container cloud-native-security kubernetes-security container-security container-escape target vulnerable-infrastructure vulnerabilities

metlo-labs / metlo
vulnerabilities,Metlo is an open-source API security platform.
Organization: metlo-labs
Home Page: https://metlo.com
security api-gateway api-security application-security cybersecurity monitoring vulnerabilities vulnerability-detection metlo infosec

mikeroyal / open-source-security-guide
vulnerabilities,Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmarks.
User: mikeroyal
vulnerabilities vulnerability-detection privacy-protection pentesters network-analysis intrusion-detection infosec incident-management mitre-attack detection-engineering

openclarity / kubeclarity
vulnerabilities,KubeClarity is a tool for detection and management of Software Bill Of Materials (SBOM) and vulnerabilities of container images and filesystems
Organization: openclarity
kubernetes-security vulnerabilities scanner effortless-integrations sbom supply-chain kubernetes security

opencve / opencve
vulnerabilities,CVE Alerting Platform
Organization: opencve
Home Page: https://www.opencve.io
cve security vulnerabilities security-tools nvd python

owasp / nodegoat
vulnerabilities,The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.
Organization: owasp
Home Page: https://www.owasp.org/index.php/Projects/OWASP_Node_js_Goat_Project
nodejs owasp-top-ten javascript docker heroku vulnerabilities nodegoat owasp-zap

owasp / railsgoat
vulnerabilities,A vulnerable version of Rails that follows the OWASP Top 10
Organization: owasp
Home Page: railsgoat.cktricky.com
appsec owasp-top rails ruby ruby-on-rails security vulnerabilities

pedrib / poc
vulnerabilities,Advisories, proof of concept files and exploits that have been made public by @pedrib.
User: pedrib
Home Page: https://agileinfosec.co.uk
vulnerabilities exploits metasploit hacking advisories

presidentbeef / brakeman
vulnerabilities,A static analysis security vulnerability scanner for Ruby on Rails applications
User: presidentbeef
Home Page: https://brakemanscanner.org/
brakeman rails ruby security security-audit security-tools security-vulnerability static-analysis vulnerabilities

pwndoc / pwndoc
vulnerabilities,Pentest Report Generator
Organization: pwndoc
Home Page: https://pwndoc.github.io/pwndoc
pentest reporting pentesting-tool reporting-tool security security-tool collaboration audit security-audit penetration-testing

quay / clair
vulnerabilities,Vulnerability Static Analysis for Containers
Organization: quay
Home Page: https://quay.github.io/clair/
clair containers docker go kubernetes oci oci-image static-analysis vulnerabilities

retirejs / retire.js
vulnerabilities,scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
Organization: retirejs
Home Page: https://retirejs.github.io/retire.js/
vulnerabilities scanner firefox-extension grunt-plugins javascript vulnerable-libraries insecure-libraries chrome-extension build-tool security

rosehgal / binexp
vulnerabilities,Linux Binary Exploitation
User: rosehgal
linux binaries exploitation stackoverflow tutorial consolidation bufferoverflow buffer-overflow-attack format-string-attack vulnerabilities shellcode-injector return-to-libc ret2libc global-offset-table overriding-got got-spawning-shell heap-exploitation

rustsec / advisory-db
vulnerabilities,Security advisory database for Rust crates published through crates.io
Organization: rustsec
Home Page: https://rustsec.org
rust security security-advisories vulnerabilities security-audit

six2dez / reconftw
vulnerabilities,reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
User: six2dez
bugbounty hacking recon pentest subdomain nuclei vulnerabilities scanner fuzzing osint penetration-testing pentesting reconnaissance dns pentest-tool security security-tools bug-bounty

skavngr / rapidscan
vulnerabilities,:new: The Multi-Tool Web Vulnerability Scanner.
Organization: skavngr
scanner vulnerability-scanners scanner-web web-vulnerabilities-scanner security-tools security-scanner penetration-testing-framework penetration-testing vulnerability-assessment vulnerability-scanner

snyk / cli
vulnerabilities,Snyk CLI scans and monitors your projects for security vulnerabilities.
Organization: snyk
Home Page: https://snyk.io
security monitor snyk vulnerabilities

trickest / cve
vulnerabilities,Gather and update all available and newest CVEs with their PoC.
Organization: trickest
Home Page: https://trickest.com
poc cve cve-poc latest-cve vulnerability vulnerabilities software-vulnerabilities software-security exploit security

xmirrorsecurity / opensca-cli
vulnerabilities,OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the community.
Organization: xmirrorsecurity
Home Page: https://opensca.xmirror.cn
sca devsecops security sbom software-bill-of-materials software-composition-analysis software-supply-chain software-supply-chain-security static-analysis vulnerabilities

ycdxsb / pocorexp_in_github
vulnerabilities,聚合Github上已有的Poc或者Exp，CVE信息来自CVE官网。Auto Collect Poc Or Exp from Github by CVE ID.
User: ycdxsb
poc exploit cve vulnerabilities

zhzyker / vulmap
vulnerabilities,Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能
User: zhzyker
Home Page: https://github.com/zhzyker/vulmap
exploit cve rce vulnerabilities cve-2016-4437 security security-tools pentesting pentest-tool cve-2020-14882

zupit / horusec
vulnerabilities,Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.
Organization: zupit
Home Page: https://horusec.io/
sast java kotlin golang python ruby terraform netcore security security-development