security-research

There are 19 repositories under security-research topic.

payloadbox / sql-injection-payload-list
🎯 SQL Injection Payload List
sql-injection attacker sql-injection-attacks sql-injection-proof sql-injection-exploitation sql-injections sql-injection-payloads injection-payloads sql-injection-filterer sql-injection-attack owasp-top-10 payloads payload websecurity bugbounty security-research hacking sql-inject injection-attacks injection
5975
payloadbox / command-injection-payload-list
🎯 Command Injection Payload List
command-injection injection security-vulnerability vulnerability payload-list payload os-injection command os unix linux windows macos application application-security bugbounty security security-research vulnerability-research security-testing
3606
PentestPad / subzy
Subdomain takeover vulnerability checker
cybersecurity bugbounty security-vulnerability subdomain-takeover security-research
Language:Go 1421
sergey-pronin / Awesome-Vulnerability-Research
🦄 A curated list of the awesome resources about the Vulnerability Research
awesome awesome-list vulnerability-research curated reading-list fuzzing exploit-development security-research
1278
diodb
disclose / diodb
Open-source vulnerability disclosure and bug bounty program database
bug-bounty bug-bounty-hunters data disclosure-policy hackers legal responsible-disclosure safe-harbor-framework safety security-research simplicity vulnerability-disclosure
Language:Python 1036
BishopFox / h2csmuggler
HTTP Request Smuggling over HTTP/2 Cleartext (h2c)
bugbounty infosec security-research security-tools
Language:Python 759
payloadbox / rfi-lfi-payload-list
🎯 RFI/LFI Payload List
rfi lfi rfi-exploiton lfi-exploitation lfi-vulnerability rfi-vulnerabillity websecurity appsec application-security web-application-security payload payloads payload-list bugbounty bug-bounty security security-research security-researcher security-researchers web-hacking
628
LockGit / Hacking
Hacker, ready for more of our story ! 🚀
hack attack geek cracker poc hacking tools hacker hacking-tool attacker attacks security-vulnerability scanner vulnerability vulnerabilities vulnerability-scanners security security-research tool
Language:Python 577
shodansploit / shodansploit
🔎 shodansploit > v1.3.0
intelligence python-script python-shodan security security-automation security-research security-scanner security-testing security-tools shodan shodan-api shodan-cli shodan-client shodan-python shodan-scripts shodan-tool shodan-tools shodansploit
Language:Python 536
security-cheatsheet / metasploit-cheat-sheet
Metasploit Cheat Sheet 💣
exploit exploitation-framework metasploit metasploit-cheat-sheet metasploit-database metasploit-framework metasploit-framework-database meterpreter msfvenom payload rapid7 security security-cheat-sheets security-research security-testing
457
ossf / fuzz-introspector
Fuzz Introspector -- introspect, extend and optimise fuzzers
fuzz-testing fuzzing security security-research testing vulnerability-analysis
Language:Python 431
rarecoil / pantagrule
large hashcat rulesets generated from real-world compromised passwords
hashcat hashcat-rules password-cracking passwords security-research
398
security-checklist / php-security-check-list
PHP Security Check List [ EN ] 🌋 ☣️
php php-library php-framework security security-audit checklist security-checklist php-security php-security-checker webapplication web-application-security bugbounty security-research security-researcher web-application web-application-framework security-testing
296
lawndoc / jaws
Jaws is an invisible programming language! Inject invisible code into other languages and files! Created for security research -- see blog post
programming-language flex-bison compiler virtual-machine security-research malware-research interpreter interpreted-programming-language polyglot c-programming
Language:C 234
chebuya / sastsweep
tool designed for identifying vulnerabilities in open source codebases at scale. It can gather and filter on key repository metrics such as popularity and project size
cli owasp sast security-audit security-research security-scanner static-code-analysis vulnerability-research semgrep vulnerability-scanners
Language:Go 233
systrack
mebeim / systrack
📡🐧 Linux kernel syscall implementation tracker
abi automation binary-analysis elf kconfig linux linux-kernel security-research syscall syscall-table syscalls
Language:Python 230
linux-syscalls
mebeim / linux-syscalls
🌐🐧 Browsable Linux kernel syscall tables built with Systrack (https://github.com/mebeim/systrack)
linux linux-kernel security-research security-tools syscall-table syscalls
Language:JavaScript 203
GaloisInc / MATE
MATE is a suite of tools for interactive program analysis with a focus on hunting for bugs in C and C++ code using Code Property Graphs.
code-property-graph llvm program-analysis security security-research static-analysis symbolic-execution
Language:Python 196
lololosys / awesome-baseband-research
A curated list of awesome baseband research resources
baseband security-research shannon vulnerability
171
fierceoj / ShonyDanza
A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.
shodan shodan-api shodan-python reconnaissance red-team blue-team purple-team scanning information-gathering shonydanza pre-configure exploits vulnerability-identification vulnerability-detection malware-identification malware-detection pentesting penetration-testing security-tools security-research
Language:Python 120
mirchr / security-research
Security Research
exploit-code security-research vulnerabilities
Language:Shell 95
dyjakan / interpreter-bugs
Fuzzing results for various interpreters.
fuzzing bugs vulnerabilities security python ruby php hhvm interpreter security-research
Language:Ruby 82
Chocapikk / CVE-2023-4966
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
citrix exploit exploitation infosec memory-leak netscaler network-security open-source pentesting python security security-research session-tokens vulnerability cve-2023-4966
Language:Python 78
Chocapikk / CVE-2023-6553
Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution
cve cybersecurity exploit hacking infosec php python rce security security-research vulnerability wordpress cve-2023-6553
Language:Python 76
lololosys / awesome_cisco_exploitation
A curated list of awesome Cisco exploitation resources
ios cisco exploitation source-code awesome awesome-list security cisco-exploitation security-research
69
disclose / dioterms
Open-source vulnerability disclosure policy templates.
boilerplate bug-bounty disclosure disclosure-policy exemption legal responsible-disclosure safe-harbor-language security security-research vulnerability-disclosure vulnerability-disclosure-policies
68
0dayInc / pwn
PWN is an open security automation framework that aims to stand on the shoulders of security giants, promoting trust and innovation.
automation reverse-engineering penetration-testing fuzzing reconnaissance web-security bugbounty security-tools devsecops penetration-testing-framework sast security-research vulnerability-scanning artificial-intelligence sdr telecom hardware-security telecom-security ai-agents
Language:Ruby 67
userlandkernel / ios-unstripped-kexts
Unstripped iOS kernel extensions and more. More coming soon.
ios rom kernel kext security-research
Language:Shell 59
win3zz / Meta-Owned-IT-Assets
Curated list of Meta (formerly Facebook) owned IT assets
bug-bounty facebook meta reconnaissance security-research subdomains
54
Macmod / STARS
A multi-cloud DNS record scanner that aims to help cybersecurity/IT analysts identify dangling CNAME records in their cloud DNS services that could possibly lead to subdomain takeover scenarios.
aws azure cloud cybersecurity dns gcp subdomain-takeover domain-takeover python security takeover infosec python3 security-research scanner subdomain digitalocean cloudflare pentesting security-tools
Language:Python 50
K3ysTr0K3R / CVE-2024-25600-EXPLOIT
A PoC exploit for CVE-2024-25600 - WordPress Bricks Builder Remote Code Execution (RCE)
cve-2024-25600 educational exploit exploitation exploits hacking poc rce remote-code-execution security-research security-researcher vulnerabilities vulnerability bricks-builder word wordpress wordpress-plugin
Language:Python 48
EnableSecurity / advisories
Security advisories published by Enable Security
security-research advisories
Language:Python 46
omarhashem123 / Security-Research
This repository contains proof of concept for zero days and CVEs that were found by Omar Hashem through Security Research
0day cve security-research zero-days bypass
Language:Python 45
lololosys / cisco_ios_research
cisco-router ios security-research
Language:C 41
public-research
redcanaryco / public-research
Public repository for Red Canary Research
security security-research
Language:C 37
captn3m0 / sanskari-proxy
A proxy for security researchers outside India to access Indian government websites without resorting to shady VPNs.
proxy india government security-research security-researcher geoblocking
34

security-research

payloadbox / sql-injection-payload-list

payloadbox / command-injection-payload-list

PentestPad / subzy

sergey-pronin / Awesome-Vulnerability-Research

disclose / diodb

BishopFox / h2csmuggler

payloadbox / rfi-lfi-payload-list

LockGit / Hacking

shodansploit / shodansploit

security-cheatsheet / metasploit-cheat-sheet

ossf / fuzz-introspector

rarecoil / pantagrule

security-checklist / php-security-check-list

lawndoc / jaws

chebuya / sastsweep

mebeim / systrack

mebeim / linux-syscalls

GaloisInc / MATE

lololosys / awesome-baseband-research

fierceoj / ShonyDanza

mirchr / security-research

dyjakan / interpreter-bugs

Chocapikk / CVE-2023-4966

Chocapikk / CVE-2023-6553

lololosys / awesome_cisco_exploitation

disclose / dioterms

0dayInc / pwn

userlandkernel / ios-unstripped-kexts

win3zz / Meta-Owned-IT-Assets

Macmod / STARS

K3ysTr0K3R / CVE-2024-25600-EXPLOIT

EnableSecurity / advisories

omarhashem123 / Security-Research

lololosys / cisco_ios_research

redcanaryco / public-research

captn3m0 / sanskari-proxy