Statistics for topic vulnerability

RepositoryStats tracks 604,717 Github repositories, of these 349 are tagged with the vulnerability topic. The most common primary language for repositories using this topic is Python (126). Other languages include: Go (33),  Java (21),  C (14),  JavaScript (14),  C++ (12),  Shell (12)

Stargazers over time for topic vulnerability

Most starred repositories for topic vulnerability (view more)

swisskyrepo
PayloadsAllTheThings swisskyrepo
14.9k
62.5k
mit
1.8k
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
bounty bypass hacking payload pentest redteam payloads security bugbounty cheatsheet enumeration methodology hacktoberfest vulnerability web-application penetration-testing privilege-escalation
Created 2016-10-18
2,042 commits to master branch, last one 2 days ago
aquasecurity
trivy aquasecurity
2.4k
24.4k
apache-2.0
172
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
go iac docker golang security devsecops containers kubernetes hacktoberfest vulnerability security-tools misconfiguration infrastructure-as-code vulnerability-scanners vulnerability-detection
Created 2019-04-11
3,310 commits to main branch, last one 38 minutes ago
The-Art-of-Hacking
h4cker The-Art-of-Hacking
3.6k
19.6k
mit
937
This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artif...
ai hacker exploit hackers hacking exploits training ai-security awesome-list awesome-lists cybersecurity vulnerability hacking-series ethical-hacking exploit-development penetration-testing artificial-intelligence vulnerability-assessment vulnerability-management vulnerability-identification
Created 2017-06-19
3,750 commits to master branch, last one 13 days ago
chaitin
SafeLine chaitin
904
15.0k
gpl-3.0
82
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
cve waf xss appsec captcha hackers blueteam firewall security bruteforce http-flood api-gateway self-hosted websecurity web-security cybersecurity sql-injection vulnerability application-security web-application-firewall
Created 2023-04-12
840 commits to main branch, last one 14 days ago
Hacker0x01
hacker101 Hacker0x01
2.6k
13.9k
other
692
Source code for Hacker101.com - a free online web and mobile security class.
xss csrf hacking security education hacker101 hackerone clickjacking web-security sql-injection vulnerability mobile-security session-fixation unchecked-redirects
Created 2017-11-27
368 commits to master branch, last one about a month ago
chaitin
xray chaitin
1.8k
10.6k
other
209
一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档
poc xss security sqlinjection vulnerability vulnerability-scanner passive-vulnerability-scanner
Created 2019-06-10
826 commits to master branch, last one 5 months ago

Trending repositories for topic vulnerability (view more)

Last 3 days (new repositories)
no newly created repositories trending in the last 3 days
Last 3 days (absolute gain)
chaitin
chaitin/SafeLine

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

15,031 (+114)
gpl-3.0
daffainfo
daffainfo/AllAboutBugBounty

All about bug bounty (bypasses, payloads, and etc)

6,020 (+76)
swisskyrepo
swisskyrepo/PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

62,531 (+54)
mit
aquasecurity
aquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

24,380 (+38)
apache-2.0
The-Art-of-Hacking
The-Art-of-Hacking/h4cker

This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artif...

19,579 (+35)
mit
Last 3 days (relative gain)
hangga
hangga/delvelin

Delveline is a Code Vulnerability Analyzer for Java and Kotlin that supports best practices in security and risk management.

84 (+8%)
XiaomingX
XiaomingX/data-cve-poc

这个仓库收集了所有在 GitHub 上能找到的 CVE 漏洞利用工具。 This repository collects all CVE exploits found on GitHub.

113 (+8%)
apache-2.0
Java-Chains
Java-Chains/web-chains

Web 版 Java Payload 生成与利用工具，提供 Java 反序列化、Hessian 1/2 反序列化等Payload生成，以及 JNDI、Fake Mysql、JRMPListener 等利用｜The web version of Java Payload generation and utilization tool provides Payload generation such ...

975 (+2%)
daffainfo
daffainfo/AllAboutBugBounty

All about bug bounty (bypasses, payloads, and etc)

6,020 (+1%)
h0ny
h0ny/NacosExploit

Nacos 综合利用工具

308 (+1.0%)
mit
Last week (new repositories)
no newly created repositories trending in the last week
Last week (absolute gain)
chaitin
chaitin/SafeLine

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

15,031 (+239)
gpl-3.0
aquasecurity
aquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

24,380 (+109)
apache-2.0
swisskyrepo
swisskyrepo/PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

62,531 (+108)
mit
daffainfo
daffainfo/AllAboutBugBounty

All about bug bounty (bypasses, payloads, and etc)

6,020 (+88)
The-Art-of-Hacking
The-Art-of-Hacking/h4cker

This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artif...

19,579 (+71)
mit
Last week (relative gain)
XiaomingX
XiaomingX/data-cve-poc

这个仓库收集了所有在 GitHub 上能找到的 CVE 漏洞利用工具。 This repository collects all CVE exploits found on GitHub.

113 (+11%)
apache-2.0
hangga
hangga/delvelin

Delveline is a Code Vulnerability Analyzer for Java and Kotlin that supports best practices in security and risk management.

84 (+6%)
x1337loser
x1337loser/bug-bounty-writeup

This repo contains different variants of Bug Bounty & Security & Pentest & Tech related Articles

34 (+6%)
4ra1n
4ra1n/poc-runner

Small & Fast Vulnerability Scanner Engine based on XRAY YAML Rule | 基于 XRAY YAML 规则的超轻量快速漏洞扫描引擎 | 基于 ANTLR 实现语法分析和完整的 XRAY YAML 规则实现 | 简单的启动参数 | 包含多种反连可用 | 可执行文件体积仅 2 MB

150 (+5%)
gpl-3.0
Java-Chains
Java-Chains/web-chains

Web 版 Java Payload 生成与利用工具，提供 Java 反序列化、Hessian 1/2 反序列化等Payload生成，以及 JNDI、Fake Mysql、JRMPListener 等利用｜The web version of Java Payload generation and utilization tool provides Payload generation such ...

975 (+4%)
Last month (new repositories)
x1337loser
x1337loser/bug-bounty-writeup

This repo contains different variants of Bug Bounty & Security & Pentest & Tech related Articles

34
Last month (absolute gain)
chaitin
chaitin/SafeLine

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

15,031 (+824)
gpl-3.0
swisskyrepo
swisskyrepo/PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

62,531 (+551)
mit
aquasecurity
aquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

24,380 (+336)
apache-2.0
The-Art-of-Hacking
The-Art-of-Hacking/h4cker

This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artif...

19,579 (+323)
mit
anchore
anchore/grype

A vulnerability scanner for container images and filesystems

9,242 (+243)
apache-2.0
Last month (relative gain)
XiaomingX
XiaomingX/data-cve-poc

这个仓库收集了所有在 GitHub 上能找到的 CVE 漏洞利用工具。 This repository collects all CVE exploits found on GitHub.

113 (+414%)
apache-2.0
hust-open-atom-club
hust-open-atom-club/S2VulnHub

Software Security Vulnerability Hub

60 (+362%)
bsd-2-clause
hangga
hangga/delvelin

Delveline is a Code Vulnerability Analyzer for Java and Kotlin that supports best practices in security and risk management.

84 (+265%)
tomwechsler
tomwechsler/Ethical_Hacking_and_Penetration_Testing

This repository is all about tips on ethical hacking and penetration testing!

28 (+47%)
mit
h0ny
h0ny/NacosExploit

Nacos 综合利用工具

308 (+40%)
mit
Last 12-months (new repositories)
Java-Chains
Java-Chains/web-chains

Web 版 Java Payload 生成与利用工具，提供 Java 反序列化、Hessian 1/2 反序列化等Payload生成，以及 JNDI、Fake Mysql、JRMPListener 等利用｜The web version of Java Payload generation and utilization tool provides Payload generation such ...

975
orhun
orhun/flawz

A Terminal UI for browsing security vulnerabilities (CVEs)

436
apache-2.0
h0ny
h0ny/NacosExploit

Nacos 综合利用工具

308
mit
V-i-x-x
V-i-x-x/AMSI-BYPASS

"AMSI WRITE RAID" Vulnerability that leads to an effective AMSI BYPASS

211
adysec
adysec/h1_asset

HackerOne资产更新 | 每日更新HackerOne资产，对HackerOne的资产进行爬行和整理，SRC资产更新仅会增加，不会进行删除，每天更新的可以进行差异化对比来获取到新的项目资产范围

199
cc0-1.0
Last 12-months (absolute gain)
swisskyrepo
swisskyrepo/PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

62,531 (+7,785)
mit
chaitin
chaitin/SafeLine

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

15,031 (+7,328)
gpl-3.0
aquasecurity
aquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

24,380 (+4,347)
apache-2.0
The-Art-of-Hacking
The-Art-of-Hacking/h4cker

This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artif...

19,579 (+3,942)
mit
anchore
anchore/grype

A vulnerability scanner for container images and filesystems

9,242 (+2,165)
apache-2.0
Last 12-months (relative gain)
synacktiv
synacktiv/octoscan

Octoscan is a static vulnerability scanner for GitHub action workflows.

186 (+3,620%)
gpl-3.0
Java-Chains
Java-Chains/web-chains

Web 版 Java Payload 生成与利用工具，提供 Java 反序列化、Hessian 1/2 反序列化等Payload生成，以及 JNDI、Fake Mysql、JRMPListener 等利用｜The web version of Java Payload generation and utilization tool provides Payload generation such ...

975 (+2,608%)
OracleNep
OracleNep/Nday-Exploit-Plan

历史漏洞的细节以及利用方法汇总收集

118 (+1,375%)
gpl-3.0
nollium
nollium/CVE-2024-9264

Exploit for Grafana arbitrary file-read and RCE (CVE-2024-9264)

88 (+1,367%)
A7cc
A7cc/Vulnerabilities_Server

一个集合了多种语言的实战化Web靶场 | A practical Web shooting range that integrates multiple languages

56 (+1,300%)
mit