V

vulnerability

Comprehensive security assessment framework for Ruby on Rails applications. Integrates multiple security tools (SAST, DAST, manual review) with automated analysis and reporting. Demonstrates application security expertise and systematic vulnerability assessment methodologies.

The purpose of this project is to improve pipeline performance when scanning for vulnerabilities in dependencies by providing a prebuilt Docker container for DependencyCheck where the vulnerability database is already downloaded

The purpose of this project is to improve pipeline performance when scanning for vulnerabilities in containers by providing a prebuilt Docker container where the vulnerability database is already downloaded

Convert CycloneDX JSON or XML docs to PDF reports. Was designed to work for VEX reports but can also generate PDFs for standard BoMs.

D(HE)ater is a proof of concept implementation of the D(HE)at attack (CVE-2002-20001) through which denial-of-service can be performed by enforcing the Diffie-Hellman key exchange.

For more information visit https://dheatattack.com

Sudo Vulnerability Local PrivEsc (CVE-2025-32463) POC with Python

This tool generates BIP-39 mnemonic phrases derived from Unix timestamps, exploring the 'Milk Sad' vulnerability's implications (CVE-2023-39910)

This project illustrates the use of metaeffekt Kontinuum within Gitlab.

XSS is a simple shell tool developed to test Cross-Site Scripting (XSS) vulnerabilities on websites.

CVE-2022-26134 - Atlassian Confluence unauthenticated OGNL injection vulnerability (RCE).

Apache 2.4.49; 2.4.50 - CVE-2021-41773; CVE-2021-42013, Path Traversal & Remote Code Execution via CGI

🤠 A tool to search vulnerable devices or specific services on Shodan using Shodan dorks or custom query.

CVE-2018-7248 - Local and Domain user enumeration via unsecured ManageEngine ServiceDesk Plus API Endpoint

Powershell Empire in Docker