The Offensive Manual Web Application Penetration Testing Framework.

一个高价值漏洞采集与推送服务 | collect valueable vulnerability and push it

Getting started with java code auditing 代码审计入门的小项目

Web Security Technology & Vulnerability Analysis Whitepapers

Detect, analyze and uniquely identify crashes in Windows applications

Uses ChatGPT API, Bard API, and Llama2, Python-Nmap, DNS Recon, PCAP and JWT recon modules and uses the GPT3 model to create vulnerability reports based on Nmap scan data, and DNS scan information. It can also perform subdomain enumeration to a great extent

A comprehensive binary emulation and instrumentation platform.

Fuzz Introspector -- introspect, extend and optimise fuzzers

Seeding fuzzers with symbolic execution

A Modular Framework for the Automated Vulnerability Analysis in IP-based Networks

IVA is a system to scan for known vulnerabilities in software products installed inside an organization. IVA uses CPE identifiers to search for CVEs related to a software product.

Metasploit-like pentest framework derived from TIDoS (https://github.com/0xInfection/TIDoS-Framework)

Program to perform vulnerability analysis and automatically generate a report

Atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.

A Tool For Absolute Beginners On Kali Linux. An Interactive Script That'll Guide You Through Attacks.

TheThing: an open-source tool to detect DOM Clobbering vulnerabilities

본 프로젝트는 KITRI BoB(Best of the Best) 10기에서 진행한 프로젝트로, 드론에 대한 취약성 연구를 진행한 내용을 기록하였습니다.

ML research on software vulnerabilities

VulDB Python scripts to fetch data via API

RegVuln is a tool that use Engine Trivy to generate reports about images Docker from Registry, have integration with Defect Dojo to Vulnerability Management.