awesome-hacker-search-engines

Vulnerabilities

• NIST NVD - US National Vulnerability Database
• MITRE CVE - Identify, define, and catalog publicly disclosed cybersecurity vulnerabilities
• GitHub Advisory Database - Security vulnerability database inclusive of CVEs and GitHub originated security advisories
• cloudvulndb.org - The Open Cloud Vulnerability & Security Issue Database
• osv.dev - Open Source Vulnerabilities
• Vulners.com - Your Search Engine for Security Intelligence
• opencve.io - Easiest way to track CVE updates and be alerted about new vulnerabilities
• security.snyk.io - Open Source Vulnerability Database
• Mend Vulnerability Database - The largest open source vulnerability DB
• Rapid7 - DB - Vulnerability & Exploit Database
• CVEDetails - The ultimate security vulnerability datasource
• VulnIQ - Vulnerability intelligence and management solution
• SynapsInt - The unified OSINT research tool
• Aqua Vulnerability Database - Vulnerabilities and weaknesses in open source applications and cloud native infrastructure
• Vulmon - Vulnerability and exploit search engine
• VulDB - Number one vulnerability database
• ScanFactory - Realtime Security Monitoring
• Trend Micro Zero Day Initiative - Publicly disclosed vulnerabilities discovered by Zero Day Initiative researchers
• Google Project Zero - Vulnerabilities including Zero Days
• Trickest CVE Repository - Gather and update all available and newest CVEs with their PoC
• cnvd.org.cn - Chinese National Vulnerability Database
• InTheWild.io - Check CVEs in our free, open source feed of exploited vulnerabilities
• Vulnerability Lab - Vulnerability research, bug bounties and vulnerability assessments
• Red Hat Security Advisories - Information about security flaws that affect Red Hat products and services in the form of security advisories
• Cisco Security Advisories - Security advisories and vulnerability information for Cisco products, including network equipment and software
• Microsoft Security Response Center - Reports of security vulnerabilities affecting Microsoft products and services
• VARIoT - VARIoT IoT Vulnerabilities Database
• Lambda Watchdog - Your CVE dashboard for AWS Lambda
• cvefeed.io - Comprehensive and up-to-date feed of the latest CVEs, security advisories, and other vulnerabilities
• CVE Crowd - Keep track of actively discussed CVEs and integrate them into your application or business
• Wiz Vulnerability Database - A comprehensive resource for monitoring high-profile vulnerabilities in cloud environments, tailored for security teams and cloud professionals
• Shodan CVEDB - The CVEDB API offers a quick way to check information about vulnerabilities in a service
• Vulert - Recent security issues found in open-source packages
• promptfoo.dev Language Model Security Database - A comprehensive collection of LLM vulnerabilities, curated from cutting-edge research papers and real-world discoveries
• opencryptography.com - Free public database of 10,000+ unique Docker image scans for hidden cryptographic assets and critical implementation flaws
• pathfinding.cloud - Comprehensive, community-maintained library documenting AWS IAM privilege escalation paths
• BaseFortify.eu - Monitor software vulnerabilities with CVE matching, exploit risk alerts, and mitigation guidance

Exploits

• Exploit-DB - Exploit Database
• Sploitus - Convenient central place for identifying the newest exploits
• Rapid7 - DB - Vulnerability & Exploit Database
• Vulmon - Vulnerability and exploit search engine
• packetstormsecurity.com - Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
• 0day.today - Ultimate database of exploits and vulnerabilities
• Living Off The Land Binaries, Scripts and Libraries - Living Off The Land Binaries, Scripts and Libraries
• GTFOBins - Curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems
• Payloads All The Things - A list of useful payloads and bypasses for Web Application Security
• XSS Payloads - The wonderland of JavaScript unexpected usages, and more
• exploitalert.com - Database of Exploits
• Reverse Shell generator - Online Reverse Shell generator with Local Storage functionality, URI & Base64 Encoding, MSFVenom Generator, and Raw Mode
• HackerOne hacktivity - See the latest hacker activity on HackerOne
• Bugcrowd Crowdstream - Showcase of accepted and disclosed submissions on Bugcrowd programs
• GTFOArgs - Curated list of Unix binaries that can be manipulated for argument injection
• shell-storm.org/shellcode - Shellcodes database for study cases
• Hacking the Cloud - Encyclopedia of the attacks/tactics/techniques that offensive security professionals can use on their next cloud exploitation adventure
• Living Off The Land Drivers - Open-source project that brings together vulnerable, malicious, and known malicious Windows drivers
• PwnWiki - Collection of TTPs (tools, tactics, and procedures) for what to do after access has been gained
• CVExploits Search - Your comprehensive database for CVE exploits from across the internet
• VARIoT - VARIoT IoT exploits database
• Living Off the Orchard: macOS Binaries - Detailed information on various built-in macOS binaries and how they can be used by threat actors for malicious purposes
• Coalition Exploit Scoring System - Model that dynamically scores new and existing vulnerabilities to reflect their exploit likelihood
• WADComs - Interactive cheat sheet containing a curated list of offensive security tools and their respective commands to be used against Windows/AD environments
• Living Off The Land Applications - Compendium of applications that can be used to carry out day-to-day exploitation
• Living off the Hardware - Resource collection that provides guidance on identifying and utilizing malicious hardware and malicious devices
• Living Off the Pipeline - How development tools commonly used in CI/CD pipelines can be used to achieve arbitrary code execution
• hackyx.io - The aim of this project is to easily find any resource related to IT security like CTF writeups, articles or Bug Bounty reports
• exploit.observer - The World's Largest Exploit & Vulnerability Intelligence Database and is freely accessible to all
• VulnCheck XDB - An index of exploit proof-of-concept code in Git repositories
• Sploitify - Interactive cheat sheet, containing a curated list of public server-side exploits (mostly)
• [Living Off The Land ESXi](h