Rezilion / mi-x
Determine whether your compute is truly vulnerable to a specific vulnerability by accounting for all factors which affect *actual* exploitability (runtime execution, configuration, permissions, existence of a mitigation, OS, etc..)
☆140Updated last year
Alternatives and similar repositories for mi-x:
Users that are interested in mi-x are comparing it to the libraries listed below
- Find CVE PoCs on GitHub☆142Updated last year
- Command line fuzzer and bruteforcer 🌪 wfuzz for command☆85Updated 2 years ago
- ☆115Updated last year
- Presentation materials for my Black Hat USA 2022 Briefing and Arsenal talks☆64Updated 2 years ago
- HardeningMeter is an open-source Python tool carefully designed to comprehensively assess the security hardening of binaries and systems.☆59Updated 2 months ago
- A little bit less hackish way to intercept and modify non-HTTP protocols through Burp & others.☆206Updated 2 years ago
- Programmatically create hunting rules for deserialization exploitation with multiple keywords, gadget chains, object types, encodings, an…☆140Updated last year
- Cisco ASA Software and ASDM Security Research☆80Updated 2 years ago
- Deluder is a tool for intercepting traffic of proxy unaware applications. Currently, Deluder supports OpenSSL, GnuTLS, SChannel, WinSock …☆181Updated 3 months ago
- A GraphQL enumeration and extraction tool☆129Updated 2 years ago
- Leveraging CVEs as North Stars in vulnerability discovery and comprehension.☆64Updated 9 months ago
- A source code static analysis platform for AppSec enthusiasts.☆231Updated last week
- Hourly updated database of exploit and exploitation reports☆254Updated last week
- ☆196Updated 3 months ago
- Paracosme is a zero-click remote memory corruption exploit that compromises ICONICS Genesis64 which was demonstrated successfully on stag…☆87Updated last year
- Create notes during a security code review in VSCode 📝 Import your favorite SAST tool findings 🛠️ and collaborate with others 🤝☆132Updated last year
- Source Code Management Attack Toolkit☆212Updated 2 years ago
- ☆179Updated 2 months ago
- First iteration of ML based Feedback WAF☆58Updated 10 months ago
- ☆104Updated 2 years ago
- A variant analysis and visualisation tool that scans codebases for similar vulnerabilities☆70Updated 2 years ago
- Downloads Information from NIST (CVSS), first.org (EPSS), and CISA (Exploited Vulnerabilities) and combines them into one list. Reports f…☆141Updated 2 years ago
- ☆110Updated last year
- A curated list of argument injection vectors☆40Updated this week
- PoC and Detection for CVE-2024-21626☆72Updated 11 months ago
- ☆72Updated last year
- Arya is a unique tool that produces pseudo-malicious files meant to trigger YARA rules. You can think of it like a reverse YARA.☆241Updated 2 years ago
- PoC_CVEs☆159Updated 3 weeks ago
- Manager of third-party sources of Semgrep rules 🗂☆78Updated 6 months ago
- Link sources to sinks in C# applications.☆142Updated last year