Search for known vulnerabilities in software using software titles or a CPE 2.3 string

Community curated list of templates for the nuclei engine to find security vulnerabilities.

rxtls is a hyper-optimized, per-core Certificate Transparency (CT) log processor built for one purpose: to extract and process 100,000+ X.509 certificates per second from the global CT ecosystem wi…

Tail Certificate Transparency logs and extract hostnames

Small and highly portable detection tests based on MITRE's ATT&CK.

Generate a MITRE ATT&CK Navigator based on a list of CVEs. Database with CVE, CWE, CAPEC, and MITRE ATT&CK Techniques data is updated daily.

Enriching the NVD CVSS scores to include Temporal & Threat Metrics

Go library for connecting to CertStream

Demisto is now Cortex XSOAR. Automate and orchestrate your Security Operations with Cortex XSOAR's ever-growing Content Repository. Pull Requests are always welcome and highly appreciated!

A fast WordPress plugin enumeration tool

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

A Go-based Exploit Framework

Agent responsible for detecting remote vulnerabilities, a robust scanner.