Vulnerability

Project Copacetic (copa) is a CLI tool for patching container image vulnerabilities directly without full image rebuilds, using vulnerability...

AI-Infra-Guard is a comprehensive red teaming platform by Tencent's Zhuque Lab designed to identify security vulnerabilities in AI systems through...

OSV.dev is Google's open-source vulnerability database and triage service that aggregates security vulnerabilities across ecosystems and provides an...

CVE Binary Tool is a free, open-source security scanner that identifies known vulnerabilities in binaries and software components by matching against...

Trivy is a comprehensive security scanner for finding vulnerabilities, misconfigurations, secrets, and software licenses across container images,...

A comprehensive, curated collection of cybersecurity resources, scripts, tools, and training materials covering ethical hacking, penetration testing,...

PoC-in-GitHub is an automated collection tool that gathers proof-of-concept exploits and vulnerability demonstrations from GitHub, designed for...

SafeLine is a self-hosted Web Application Firewall (WAF) and reverse proxy designed to protect web applications from common attacks including SQL...

Secator is a task and workflow automation framework for security assessments that integrates dozens of well-known pentesting and OSINT tools (arjun,...

Trivy Action is a GitHub Actions wrapper for Aqua Security's Trivy vulnerability scanner, enabling automated container image and artifact scanning...

A specialized security tool that provides 77,335 Nuclei vulnerability scanning templates automatically updated daily from Wordfence intelligence,...

Bearer is an open-source static application security testing (SAST) tool that scans source code to identify security vulnerabilities and privacy...

OpenVAS Scanner is a specialized vulnerability assessment engine for the Greenbone Community Edition, designed to execute continuous feeds of...

CVE PoC is an automated aggregation repository that collects and organizes publicly available proof-of-concept exploits for CVEs, organized by year...

PayloadsAllTheThings is a comprehensive, community-maintained reference collection of payloads, bypasses, and exploitation techniques for web...

Grype is a vulnerability scanner that analyzes container images, filesystems, and SBOMs against known vulnerability databases. It serves DevOps...

AppShark is a static taint analysis platform designed specifically for identifying vulnerabilities and compliance issues in Android applications. It...

A curated list of resources for web application security education and penetration testing, including books, documentation, tools, cheat sheets,...

Faraday is an open-source vulnerability management platform designed to centralize, aggregate, and normalize security scan data from multiple tools...

Jar Analyzer is a Java bytecode analysis GUI tool designed for security audits, vulnerability discovery, and program analysis of JAR/WAR files. It...

Dockle is a container image linter that scans Docker images for security vulnerabilities and best-practice violations, including CIS Benchmarks...

Singularity of Origin is a specialized framework for executing DNS rebinding attacks against vulnerable software on local networks and IoT devices....

GUAC aggregates software security metadata (SBOMs, attestations, vulnerability data) into a queryable graph database to enable supply chain...

Copy Fail (CVE-2026-31431) is a security research project documenting and providing an exploit for a 9-year-old Linux kernel local privilege...

Malwoverview is a Python-based threat hunting and malware analysis platform that aggregates intelligence from 18+ sources including VirusTotal,...

ysoserial is a proof-of-concept tool for generating Java deserialization attack payloads using gadget chains from common libraries. It is specialized...

This is a proof-of-concept security research tool that demonstrates a privacy vulnerability in WhatsApp and Signal by measuring Round-Trip Time (RTT)...