Pompem is an open source tool designed to automate the search for Exploits and Vulnerabilities in important databases. Developed in Python, it offers advanced search capabilities, aiding pentesters and ethical hackers. It searches in databases like PacketStorm security, CXSecurity, ZeroDay, Vulners, National Vulnerability Database, and WPScan Vulnerability Database. Pompem can be downloaded from its Git repository or by clicking on the provided links. It works with Python 3.5 and requires the Requests package.
FEATURES
ALTERNATIVES
A vulnerable web site in NodeJS for testing security source code analyzers.
A virtual machine with numerous security vulnerabilities for testing exploits with Metasploit.
Scans Alpine base images for vulnerabilities using Multi Stage builds in Docker 17.05
Patch-level verification tool for bundler to check for vulnerable gems and insecure sources.
Linux privilege escalation auditing tool for detecting security deficiencies in Linux kernels.
A tool that finds unprotected secrets in container images or file systems, matching against a database of 140 secret types.
A tool that showcases the attack surface of a given Android device, highlighting potential vulnerabilities and security risks.
PINNED

InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.

Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.

Kriptos
An AI-driven data classification and governance platform that automatically discovers, analyzes, and labels sensitive information while providing risk management and compliance capabilities.

System Two Security
An AI-powered platform that automates threat hunting and analysis by processing cyber threat intelligence and generating customized hunt packages for SOC teams.

Aikido Security
Aikido is an all-in-one security platform that combines multiple security scanning and management functions for cloud-native applications and infrastructure.

Permiso
Permiso is an Identity Threat Detection and Response platform that provides comprehensive visibility and protection for identities across multiple cloud environments.

Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.

Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.