VulnReach builds on standard SCA output by adding reachability context - proving through static analysis, taint tracking, and live runtime coverage which of the detected CVEs can actually be reached in your application.
☆23Oct 3, 2026Updated last month
Alternatives and similar repositories for vulnreach
Users that are interested in vulnreach are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆15Sep 20, 2025Updated last year
- ☆14Jun 4, 2026Updated 5 months ago
- Secure SDLC learning project with GitHub Actions, Semgrep, Trivy, Gitleaks, OWASP ZAP, Docker, Kubernetes, and secure authentication☆22Jul 21, 2026Updated 3 months ago
- AI-Driven Breach and Attack Simulation Tool (Initial Proof of Concept for AI Pentest Copilot)☆28Jan 6, 2025Updated last year
- A recon Framework for Bug Bounty Hunters that would convert the output of a script into Markdown syntax document, which would help them t…☆12Sep 21, 2021Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Set of scripts that will be useful for bug hunters☆17Updated this week
- ☆11Jun 9, 2023Updated 3 years ago
- Claude Code plugin for code-anchored threat modeling and security architecture review. Note that the plugin is currently rebuild and the …☆18Oct 29, 2026Updated last week
- ☆11Jan 25, 2023Updated 3 years ago
- ☆11Jan 24, 2023Updated 3 years ago
- Burp Suite extension + port-based highlighter: dedupes HTTP history into a live unique-request feed and color-codes attacker/victim traff…☆15Aug 14, 2026Updated 2 months ago
- A BugBounty playbook covering vulnerability bypasses, payloads, and quick checks for OWASP Top 10 + extras.☆23Sep 29, 2025Updated last year
- ☆38Aug 6, 2025Updated last year
- Terminate AV/EDR processes by exploiting the vulnerable NsecSoft driver☆32Sep 15, 2025Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Simple XSS vulnerability checker tool very useful with xsschecker.☆28Nov 21, 2025Updated 11 months ago
- Analyze Android native `.so` files☆129Jul 28, 2025Updated last year
- A multi-agent application-security review harness for Claude Code (and, later, other AI agents). One router skill dispatches to a full of…☆42Updated this week
- BurpSuite Extension leveraging new Montoya API to automatically sets payload positions to your inruder tab saving you time during VAPT.☆19Feb 21, 2026Updated 8 months ago
- Custom Trickest Workflows☆12Oct 26, 2023Updated 3 years ago
- ThreadsApp is a web application built with a purpose of helping people learn web application security.☆18Nov 22, 2024Updated last year
- BaldHead is a modular and interactive Active Directory (AD) attack framework built for red teamers and security testers. It automates enu…☆110Apr 11, 2026Updated 6 months ago
- WAHA - WhatsApp HTTP API that you can run in a click! (Documentation repo)☆12Updated this week
- Threat modeling playbook for cloud-native, AI (RAG, agents), and A2A systems with STRIDE, risk models, controls, and test plans.☆18Jul 3, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Droz_scan is a automated script, that runs all the queries of drozer in a single run☆28May 15, 2023Updated 3 years ago
- HazProne is a Cloud Pentesting Framework that emulates close to Real-World Scenarios by deploying Vulnerable-By-Demand AWS resources enab…☆40Jul 15, 2022Updated 4 years ago
- Tools for bug bounty☆29Jul 9, 2025Updated last year
- ☆11Mar 11, 2024Updated 2 years ago
- Securing LLM's Against Top 10 OWASP Large Language Model Vulnerabilities 2024☆23May 10, 2024Updated 2 years ago
- ☆45Sep 25, 2025Updated last year
- ☆15Mar 21, 2025Updated last year
- Jinja2 Template - AdminT Dashboard (Free Version) | AppSeed☆11May 17, 2021Updated 5 years ago
- VulnVerify Skills helps OpenCode, Codex, and Claude Code verify web vulnerability reports from manual or agentic AI testing.☆11Oct 18, 2026Updated 2 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆18Sep 24, 2026Updated last month
- ☆12Jul 12, 2021Updated 5 years ago
- This repository is a carefully chosen collection of cloud security-related interview questions and scenarios. This resource will help you…☆40Oct 24, 2026Updated last week
- ☆22Jun 10, 2026Updated 4 months ago
- ☆42Jul 1, 2025Updated last year
- Android - Dirty Stream exploit for MI-File Explorer V1-210567 version. CVE-2024-35205☆13May 19, 2025Updated last year
- ☆26Sep 5, 2025Updated last year