Awesome GitHub RepositoriesVulnerability Data Synchronization

WPScan is a security analysis utility and vulnerability scanner designed specifically for auditing WordPress installations and other content management systems. It functions as a web application security tool that identifies misconfigurations, outdated software, and security holes in core installations, plugins, and themes. The tool employs black-box scanning techniques to perform site component enumeration, identifying users, themes, and plugins by matching known file paths and response signatures. It matches these detected components against a database of known security flaws to analyze the

This project is a vulnerability intelligence database and aggregator that organizes common vulnerabilities and exposures alongside their corresponding proof-of-concept exploit code. It functions as a security vulnerability tracker and an indexed directory of public exploit payloads. The system monitors new security flaws and updates to known exploits through repository watches and atom feeds. It utilizes automated aggregation to collect vulnerability details from centralized repositories and discovers associated exploit code via reference analysis and global searches. The tool provides capab

This project is a public exploit code archive and vulnerability database. It serves as a collection of documented software exploits and vulnerability data, providing a reference library of exploit scripts and payloads used to validate security flaws in target environments. The archive supports security threat intelligence, vulnerability research, and penetration testing workflows. It functions as a historical record of software vulnerabilities and the proof-of-concept code used to trigger them. The codebase is organized through directory-based categorization and flat-file data storage, utili

Naabu is a port scanner library and tool that probes hosts for open ports using SYN, CONNECT, and UDP methods to identify active services. It functions as a Go library for embedding port scanning into programs, and as a standalone tool that accepts targets as hostnames, IP addresses, CIDR ranges, or ASN numbers. The tool discovers live hosts before scanning, filters ports by range or top lists, and can integrate with Nmap for service version detection. The project distinguishes itself through its SYN-based port probing approach that sends TCP SYN packets and analyzes responses without complet

Dieses Projekt ist eine Reihe spezialisierter Utilities für die Schwachstellenbewertung unter Windows und das Audit von Patch-Management. Es fungiert als Schwachstellenscanner und Exploit-Vorschlagstool, das installierte Updates analysiert, um fehlende Sicherheits-Patches und deren entsprechende bekannte Schwachstellen zu identifizieren. Das System zeichnet sich dadurch aus, dass es fehlende Updates mit einer konsolidierten Schwachstellendatenbank abgleicht, um spezifische öffentlich verfügbare Exploits zu empfehlen. Es behält die Genauigkeit bei, indem es Remote-Sicherheitsbulletins in eine lokale Datenbank synchronisiert und identifizierte Lücken mit offiziellen Update-Katalogen kreuzvergleicht, um Patch-Supersedence zu handhaben und Fehlalarme zu eliminieren. Das Tool bietet Funktionen für die Analyse der Sicherheitsoberfläche, die es Benutzern ermöglichen, risikoreiche Lücken durch Schweregrad-basierte Filterung und Verfeinerung nach Installationsdatum zu priorisieren. Es enthält zudem einen Datenbank-Client für die Sammlung und Synchronisation von Sicherheitsdefinitions-Updates aus mehreren Remote-Quellen.

The openvas-scanner is a vulnerability scanner designed to identify security weaknesses and outdated software in target systems. It performs network vulnerability scanning by executing security tests and network attack scripts, as well as conducting local security auditing through static version checks of installed software. The project utilizes community-managed feeds to synchronize and update local security definitions and vulnerability tests. These tests and scan configurations are loaded into the system via container images or manual transfers and stored in a persistent relational databas

Lists is a curated collection of DNS blocklists, a domain blocklist generator, and a categorized library of domains used for network content filtering. The project provides a command-line pipeline that aggregates upstream sources to build and validate blocklists used to redirect unwanted traffic to null addresses. The project distinguishes itself through a CLI-driven build pipeline that automates the fetching, validation, and daily regeneration of datasets. It organizes domains into discrete functional categories rather than a single monolithic list and exports them in multiple syntaxes, incl

Windows-Exploit-Suggester is a security analysis tool designed to audit patch levels and identify vulnerabilities on Windows hosts. It functions as a vulnerability scanner and patch level auditor that compares installed system hotfixes against Microsoft security bulletins to detect missing updates. The project maps these missing security updates to known public exploits and available Metasploit modules. It uses a vulnerability database interface to download and query external security bulletin data, linking specific unpatched vulnerabilities to viable exploit vectors. The tool's capabilities

Windows-Exploit-Suggester ist ein Security-Audit-Tool zum Scannen von Windows-Systemen auf veraltete Komponenten und fehlende Sicherheits-Patches. Es fungiert als Vulnerability-Scanner, der den Patch-Stand des Ziels mit offiziellen Sicherheitsbulletins der Hersteller vergleicht, um Sicherheitslücken zu identifizieren. Das Tool ist auf Exploit-Mapping spezialisiert und verknüpft identifizierte fehlende Updates mit bekanntem öffentlichem Exploit-Code und verfügbaren Penetration-Testing-Modulen. Es automatisiert den Rechercheprozess durch den Abgleich fehlender Patches mit spezifischen Schwachstellen-IDs, um anwendbare Angriffsvektoren zu bestimmen. Das System umfasst Funktionen für den Remote-Patch-Stand-Vergleich und heuristische Erkennung, um den Status eines Hosts abzuleiten. Es hält die Genauigkeit durch einen Synchronisationsmechanismus aufrecht, der die neuesten Sicherheitsdaten von Herstellerquellen herunterlädt und parst, um die interne Schwachstellendatenbank zu aktualisieren.

x-cmd is an AI agent orchestrator, cloud infrastructure CLI, and cross-platform package manager that provides an enhanced POSIX shell toolkit. It integrates large language models directly into the terminal for chatting, code generation, and the execution of agentic workflows, while offering a framework for building interactive terminal user interface components. The project distinguishes itself by deploying containerized AI agents within isolated sandboxes, provisioning them with specialized skills and headless browser automation capabilities. It further streamlines development through a unif

Vulscan is a network service auditor and vulnerability scanner that utilizes the Nmap Scripting Engine to identify security flaws. It functions as a version-based flaw detector, matching detected software banners against an offline vulnerability database to identify potential security risks without requiring a constant internet connection. The tool provides mechanisms for refining identification accuracy, including an interactive mode for manual version overriding and configurable matching logic to filter results. It manages security data through a system for loading local datasets and synchr

Dependency-Track is a software composition analysis tool and vulnerability management system designed to track dependencies and supply chain risk. It functions as a platform for ingesting and analyzing CycloneDX software bills of materials to identify known vulnerabilities and license compliance issues within third-party software components. The system distinguishes itself by mirroring external vulnerability databases locally to enable fast offline analysis and using VEX documents to differentiate between technical vulnerabilities and actual contextual risks. It also integrates with identity

cve-search is a vulnerability search engine and database manager designed to index, synchronize, and query CVE and CPE security vulnerability data. It functions as a security data warehouse that imports vulnerability feeds into a local database to enable fast, keyword-based discovery of security flaws. The project provides a web-based vulnerability browser and a programmatic JSON API for retrieving records and risk scores. It utilizes full-text indexing for vulnerability descriptions and implements an identity-verified security portal using the OpenID Connect standard for user authentication.

OSV is a distributed database and aggregator of open-source security advisories that uses a standardized vulnerability schema to track security flaws. It functions as a system for collecting and normalizing security data from diverse ecosystems into a single unified format, providing a web API for querying package vulnerabilities and submitting standardized records. The project distinguishes itself through a security advisory distribution service that supports bulk dataset exports via cloud storage buckets and incremental synchronization of security record updates. It also employs sandbox-bas