Repository navigation
Common Vulnerabilities and Exposures (CVE)
- Website
- Wikipedia
- 维基百科
The Common Vulnerabilities and Exposures (CVE) system provides a reference-method for publicly known information-security vulnerabilities and exposures. The United States' National Cybersecurity FFRDC, operated by The Mitre Corporation, maintains the system, with funding from the US National Cyber Security Division of the US Department of Homeland Security
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
Gather and update all available and newest CVEs with their PoC.
📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.
渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
Open Source Vulnerability Management Platform
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
快速搭建各种漏洞环境(Various vulnerability environment)
Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能
✍️ A curated list of CVE PoCs.
🌴Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)
cve-search - a tool to perform local searches for known vulnerabilities
Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.
利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点
A collection of JavaScript engine CVEs with PoCs
A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.
🐈Medusa是一个红队武器库平台，目前包括XSS平台、协同平台、CVE监控、免杀生成、DNSLOG、钓鱼邮件、文件获取等功能，持续开发中
Open-source CVE monitoring and alerting platform
CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15