V

vulnerability

End-to-end security assessment of a production Rails app. Real-world vulnerability analysis and professional reporting.

Convert CycloneDX JSON or XML docs to PDF reports. Was designed to work for VEX reports but can also generate PDFs for standard BoMs.

The purpose of this project is to improve pipeline performance when scanning for vulnerabilities in containers by providing a prebuilt Docker container where the vulnerability database is already downloaded

The purpose of this project is to improve pipeline performance when scanning for vulnerabilities in dependencies by providing a prebuilt Docker container for DependencyCheck where the vulnerability database is already downloaded

Sudo Vulnerability Local PrivEsc (CVE-2025-32463) POC with Python

This tool generates BIP-39 mnemonic phrases derived from Unix timestamps, exploring the 'Milk Sad' vulnerability's implications (CVE-2023-39910)

D(HE)ater is a proof of concept implementation of the D(HE)at attack (CVE-2002-20001) through which denial-of-service can be performed by enforcing the Diffie-Hellman key exchange.

For more information visit https://dheatattack.com

This project illustrates the use of metaeffekt Kontinuum within Gitlab.

XSS is a simple shell tool developed to test Cross-Site Scripting (XSS) vulnerabilities on websites.

CVE-2022-26134 - Atlassian Confluence unauthenticated OGNL injection vulnerability (RCE).

Apache 2.4.49; 2.4.50 - CVE-2021-41773; CVE-2021-42013, Path Traversal & Remote Code Execution via CGI

🤠 A tool to search vulnerable devices or specific services on Shodan using Shodan dorks or custom query.

CVE-2018-7248 - Local and Domain user enumeration via unsecured ManageEngine ServiceDesk Plus API Endpoint

Powershell Empire in Docker