快速搭建各种漏洞环境(Various vulnerability environment)

Collaborative Penetration Test and Vulnerability Management Platform

✍️ A curated list of CVE PoCs.

渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

A collection of JavaScript engine CVEs with PoCs

cve-search - a tool to perform local searches for known vulnerabilities

Vulnerability Labs for security analysis

CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15

A tool to identify and exploit sudo rules' misconfigurations and vulnerabilities within sudo

The Correlated CVE Vulnerability And Threat Intelligence Database API

ES File Explorer Open Port Vulnerability - CVE-2019-6447

🔪Browser logic vulnerabilities ☠️

A collection of curated Java Deserialization Exploits

🌴Windows exploits提权漏洞合集，附带编译环境，演示GIF图，漏洞详细信息，可执行文件

🐈Medusa是一个扫描平台，目前包含200+个漏洞 http://medusa.ascotbe.com

CVE-2018-8120 Windows LPE exploit

Vulnerability Scanner

Guidance for the Spectre, Meltdown, Speculative Store Bypass, Rogue System Register Read, Lazy FP State Restore, Bounds Check Bypass Store, TLBleed, and L1TF/Foreshadow vulnerabilities as well as general hardware and firmware security guidance. #nsacyber

Tracking CVEs for the linux Kernel

BootStomp: a bootloader vulnerability finder

Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative)

A PHP version scanner for reporting possible vulnerabilities

Documentation and Sharing Repository for ThreatPinch Lookup Chrome & Firefox Extension

WebMap-Nmap Web Dashboard and Reporting

Vulmap是一款漏洞扫描工具，可对Web容器、Web服务器、Web中间件以及CMS等Web程序进行漏洞扫描，并且具备漏洞利用功能。 相关测试人员可以使用vulmap检测目标是否存在特定漏洞，并且可以使用漏洞利用功能验证漏洞是否真实存在。

SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs). 🌈

Original Automated CVE Checking Tool

Containing Self Made Perl Reproducers / PoC Codes

Exploits by 1N3 @CrowdShield @xer0dayz @XeroSecurity