Hands-On Security in DevOps

Exploits and CVE

These resources provide the proof-of-concept (PoC) testing scripts and tools of CVEs. They're valuable because we may apply or customize those testing scripts to be parts of our security testing toolsets. The Security Focus, Packet Storm Security, and Exploit Database provide not only the CVEs information but also security testing tools and PoC scripts. Check out the following:

• Security Focus: The Security Focus lists the technical details of every CVE vulnerability.
• Packet Storm Security: In addition to the exploits, it provides lots of updated security tools and security whitepapers.
• Exploit Database: It provides the exploits, shellcode, security whitepapers, and also google hacking database.

For example, for the Java ...