基于 LLM 的白盒漏洞挖掘 Agent。四条挖掘路径（启发式、快速扫描 Sink 回溯、历史漏洞绕过、无约束）+ Docker 靶场 / 局部 harness / 静态验证，支持互联网复现与攻击链串联。 LLM-based white-box vuln mining agent. Four paths (heuristic, fast-scan sink backtrace, historical bypass, unconstrained) + Docker lab / harness / static verify; Internet retest and attack chains.
☆33Oct 11, 2026Updated last month
Alternatives and similar repositories for VulnHunter-White
Users that are interested in VulnHunter-White are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆12Mar 13, 2026Updated 7 months ago
- Pure-Go Java Decompiler and Serialization Operator☆27Updated this week
- 第十七届全国大学生信息安全竞赛创新实践能力赛决赛 - AWDP☆11Jul 20, 2024Updated 2 years ago
- Lightweight AI red teaming harness for authorized agent / GenAI challenges (BCTF Agent Plus–style): schedule, bounded recon, validate, di…☆30Aug 26, 2026Updated 2 months ago
- 一个轮子，用于渗透测试优化的 DNS/HTTP 日志工具，简洁、轻便、更易于使用。☆16Sep 29, 2024Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- A pure TypeScript/JavaScript decompiler for Java bytecode. Runs in browsers and Node.js — no JVM, WebAssembly, or runtime dependencies.☆23Oct 27, 2026Updated 2 weeks ago
- Some ReadObject Sink With JDBC☆243May 8, 2024Updated 2 years ago
- 在Java安全学习过程中的笔记和代码☆125Oct 11, 2026Updated last month
- Memory Webshell for Spring Web - 适用于 Spring Web 的内存马☆26Jan 18, 2024Updated 2 years ago
- A command-line tool for testing RocketMQ vulnerabilities.☆17Feb 7, 2025Updated last year
- AI Code Audit Prompt Words☆28Feb 12, 2026Updated 8 months ago
- An AI-driven remote command execution platform built with Rust. VectorShell bridges AI agents and remote targets — run shell commands, ma…☆18Jun 24, 2026Updated 4 months ago
- CTF-Java-Gadget专注于收集CTF中Java赛题的反序列化片段☆288Dec 13, 2024Updated last year
- A Python framework for combining static analysis with LLM-based bug verification☆17Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Local-first pentest agent: Go daemon + React dashboard + Codex/Claude Code/Pi runtimes, scoped projects, Blackboard, sandbox runners☆31Nov 1, 2026Updated last week
- 阿里巴巴安全SDK，提供SSRF、JDBC、XXE防护能力☆116Updated this week
- 构造字节在ASCII范围内的jar☆142Feb 14, 2022Updated 4 years ago
- Apache Dubbo漏洞测试Demo及其POC☆66Mar 27, 2023Updated 3 years ago
- CVE-2024-43044的利用方式☆20Aug 13, 2024Updated 2 years ago
- Karma 是一款隐私优先的桌面应用，用于检测和脱敏个人身份信息（PII），基于 OpenAI Privacy Filter 模型。所有 AI 推理完全在本地设备上运行——您的数据永远不会离开您的设备。☆62Aug 16, 2026Updated 2 months ago
- ☆15Jul 11, 2021Updated 5 years ago
- CodeQL分析闭源Jar包脚本，基于Apache Ant构建CodeQL数据库☆40Apr 16, 2026Updated 6 months ago
- A beginner-friendly Kubernetes CTF that you can deploy yourself.☆13Aug 8, 2022Updated 4 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- 一些总结出来的gadget的flow，后续合适和加入新的flow☆71Dec 6, 2025Updated 11 months ago
- Java漏洞调试分析集合☆96Mar 11, 2024Updated 2 years ago
- AI-driven pi-like agent for cyber security — single binary for pentest, red team, bug bounty☆408Updated this week
- Read and write Burp Suite Proxy HTTP history, byte for byte.☆30Aug 31, 2026Updated 2 months ago
- ai自动化渗透小程序，解决了微信小程序更新后偏移值改变导致的注入失败☆198Sep 27, 2026Updated last month
- We Are ANONYMOUS☆10Sep 30, 2020Updated 6 years ago
- c3p0 new gadget☆28Apr 1, 2025Updated last year
- 自动化 SRC 漏洞挖掘系统：FOFA 资产测绘 + LLM 多 worker 自主挖掘/审核/情报沉淀。Powered By StanleyNull☆550Oct 12, 2026Updated 3 weeks ago
- Autonomous agent that mines Java deserialization gadget chains from any JAR directory. Static bytecode analysis + dynamic JVM probes + du…☆30Oct 28, 2026Updated 2 weeks ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ☆20Jul 13, 2026Updated 3 months ago
- A dynamic frida script for detecting possible vulnerabilities in Android apps, automating security scanning and reporting.☆18Oct 10, 2025Updated last year
- Scan a codebase for AI SDKs, MCP servers and agent tools; map risks to NIST AI RMF, ISO 42001, EU AI Act and the OWASP LLM and Agentic To…☆22Updated this week
- 一款支持自定义的 Java 回显载荷生成工具｜A customizable Java echo payload generation tool.☆464Jan 12, 2025Updated last year
- A VM manager like Lima/Colima but for Docker in QEMU in Termux in Android! No root needed.☆11Oct 18, 2026Updated 3 weeks ago
- DBX 数据审计版☆51Updated this week
- Java bytecode analysis engine built on ASM, extracts method call graphs, inheritance trees, Spring routes, and string constants from JAR/…☆48Mar 20, 2026Updated 7 months ago
Are these results useful?