This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

Advanced vulnerability scanning with Nmap NSE

The Correlated CVE Vulnerability And Threat Intelligence Database API

Protocol Learning and Stateful Fuzzing

Bash script purposed for system enumeration, vulnerability identification and privilege escalation.

Grunt plugin for retire.

The clever vulnerability dependency finder

Advanced web server fingerprinting for Nmap

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode

NVD/CVE as JSON files

Detect root, emulation, debug mode and other security concerns in your Xamarin apps

A Modular Framework for the Automated Vulnerability Analysis in IP-based Networks

Advanced Web Browser Fingerprinting

Open-source Exploiting Framework

A simple shell script which utilizes nmap, nikto, dirb, enum4linux and other open source goodies to automate enumeration process.

Advanced web server fingerprinting

Vulnerability Discovery with Function Representation Learning from Unlabeled Projects

Network/WebApplication Information Gathering, Enumeration and Vulnerability Scanning (Under Development)

VulDB Python scripts to fetch data via API

WP-Exploiter is a tool for testing and exploiting a wide range of WordPress websites.

A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.

Yet Another Web Security Scanner | A Web Application Security Scanner Written in Python.

VulDB batch scripts that use curl to fetch data via API

CVE Vulnerability scanner of your software bill of materials (SBOM). ASCII text input.

Simple and extensible fuzzer

Advanced Web Browser Fingerprinting

VulDB PHP scripts to fetch data via API

Offline WordPress plugin version acquisition scanner and online version vulnerability identification. Scan an offline or online WordPress install for vulnerable plugins as long as it is run from Windows computer.

Open source patch/vulnerability manager for third party libraries

Exploit code for Vulnerable IoT Demonstrator