This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artificial intelligence security, vulnerability research, exploit development, reverse engineering, and more.

Advanced vulnerability scanning with Nmap NSE

The Correlated CVE Vulnerability And Threat Intelligence Database API

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

Protocol Learning and Stateful Fuzzing

Bash script purposed for system enumeration, vulnerability identification and privilege escalation.

PatrowlHears - Vulnerability Intelligence Center / Exploits

Advanced web server fingerprinting for Nmap

Open-Source Vulnerability Intelligence Center - Unified source of vulnerability, exploit and threat Intelligence feeds

A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.

Nmap script that scans for probable vulnerabilities based on services discovered in open ports.

NVD/CVE as JSON files

The clever vulnerability dependency finder

Detect root, emulation, debug mode and other security concerns in your Xamarin apps

Grunt plugin for retire.

A Modular Framework for the Automated Vulnerability Analysis in IP-based Networks

Revisiting Graph Neural Networks for Vulnerability Detection (ICSE 2022) (Pytorch)

VINCE is the Vulnerability Information and Coordination Environment developed and used by the CERT Coordination Center to improve coordinated vulnerability disclosure. VINCE is a Python-based web platform.

Advanced Web Browser Fingerprinting

Vulnerability Discovery with Function Representation Learning from Unlabeled Projects