OWASP/Nettacker

View on GitHub

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

Stars: 5.6k
Forks: 1.2k
Open beginner issues: 0
Indexed issues: 107
Avg merge: 1d 21h
Merged PRs (30d): 16

Dominant language: Python
License: Apache-2.0
Last GitHub push: Sep 13, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue

Beginner friendly Everything

Open All

107 open issues indexed

docs: correct test paths in CodebaseOverview.md Open

OWASP/Nettacker#1748 · 1 reaction · 1 assignee · Opened Sep 14, 2026
test: `test_ssl.py` and `test_socket.py` fail under Python 3.12 due to `ssl.wrap_socket` deprecation Open

Difficulty 3/5 1-2 days Newbie friendliness 78/100

OWASP/Nettacker#1747 · 3 comments · Opened Sep 14, 2026
Add detection module for CVE-2026-20079 (Cisco Firewall Management Center authentication bypass, CISA KEV) Open

OWASP/Nettacker#1742 · 1 comment · 1 reaction · 1 assignee · Opened Sep 13, 2026
test: add unit tests for pop3.py core library Open

OWASP/Nettacker#1736 · 2 comments · 1 assignee · Opened Sep 12, 2026
[BUG] SQLite/APSW retry exhaustion reports abandoned writes as successful Open

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

OWASP/Nettacker#1734 · 2 comments · Opened Sep 12, 2026
[Module-request] CVE-2026-59822 (Authentication Bypass in LiteLLM) Open

OWASP/Nettacker#1729 · 1 comment · 1 assignee · Opened Sep 8, 2026
Task queues for web uploads based on scan_id Open

OWASP/Nettacker#1727 · 1 assignee · Opened Sep 7, 2026
Cipher_suites list in is_weak_cipher_suite() contains non-functional protocol-version strings Open

OWASP/Nettacker#1724 · 1 assignee · Opened Sep 5, 2026
Failed tests on FreeBSD Open

OWASP/Nettacker#1721 · 3 comments · 1 assignee · Opened Sep 4, 2026
ssl_weak_cipher_vuln false positive for TLS 1.3 Open

OWASP/Nettacker#1719 · 3 comments · 1 assignee · Opened Sep 4, 2026
[Feature Request] Add Vulnerability Detection Module for CVE-2024-24919 (Check Point Security Gateway Information Disclosure) Open

OWASP/Nettacker#1714 · 1 assignee · Opened Sep 2, 2026
Silent exceptions in api/engine.py mask database and value errors Open

OWASP/Nettacker#1711 · 1 assignee · Opened Aug 31, 2026
[Feat] Add YAML-based module flows (--module-flow) Open

gsoc

OWASP/Nettacker#1697 · 1 comment · 1 assignee · Opened Aug 24, 2026
SolarWinds Web Help Desk version detection module needed Open

OWASP/Nettacker#1690 · 1 comment · 1 reaction · 1 assignee · Opened Aug 22, 2026
[Feature Request] Add Vuln Module for PHP CGI Argument Injection (CVE-2024-4577) Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

OWASP/Nettacker#1687 · 3 comments · Opened Aug 22, 2026
[Module-request] CVE-2026-9082 (SQLi in Drupal) Open

OWASP/Nettacker#1684 · 1 comment · 1 assignee · Opened Aug 21, 2026
Silently Dropping the global timeout value Open

OWASP/Nettacker#1680 · 1 assignee · Opened Aug 21, 2026
HTTP engine has no partial-content/timeout handling for streaming (chunked/SSE) responses Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

OWASP/Nettacker#1658 · 1 comment · Opened Aug 8, 2026
[Module-request] CVE-2026-9198 (RCE in Langflow) Open

OWASP/Nettacker#1656 · 1 comment · 1 assignee · Opened Aug 7, 2026
eval/exec on module YAML content in dependent-value resolution Open

answered

Difficulty 4/5 3-5 days Newbie friendliness 35/100

OWASP/Nettacker#1651 · 2 comments · Opened Aug 5, 2026
Consistently store port as the same data type (int) Open

OWASP/Nettacker#1649 · 1 comment · 1 assignee · Opened Aug 5, 2026
Inconsistent port extraction in process_conditions() in base.py Open

OWASP/Nettacker#1646 · 2 comments · 1 assignee · Opened Aug 5, 2026
Harden CI/CD workflow token permissions (OpenSSF Scorecard Token-Permissions: 0) Open

OWASP/Nettacker#1645 · 2 comments · 1 reaction · 1 assignee · Opened Aug 2, 2026
New vulnerability detection module for CVE-2026-33017 (Langflow unauthenticated RCE) Open

OWASP/Nettacker#1640 · 3 comments · 1 assignee · Opened Jul 27, 2026
[Feat] DSL engine Open

OWASP/Nettacker#1586 · 1 comment · 1 assignee · Opened Jun 17, 2026
[Bug] Disk storage leak and path corruption in API report download endpoints Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

OWASP/Nettacker#1584 · 9 comments · Opened Jun 14, 2026
[Bug] Windows compatibility issue in locale directory parsing (get_languages) Open

Difficulty 2/5 1-3 hours Newbie friendliness 88/100

OWASP/Nettacker#1582 · 7 comments · Opened Jun 14, 2026
Dependency Vulnerabilities (CVEs) in aiohttp, cryptography, idna, pyopenssl, paramiko Open

answered

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

OWASP/Nettacker#1570 · 2 comments · Opened Jun 4, 2026
[Module-request] CVE-2026-27176 Open

OWASP/Nettacker#1568 · 1 comment · 1 assignee · Opened Jun 3, 2026
[Feature Request] Add module for Wing FTP Server RCE (CVE-2025-47812) Open

Difficulty 3/5 1-2 days Newbie friendliness 65/100

OWASP/Nettacker#1561 · 3 comments · Opened May 30, 2026
[Module-request] CVE-2026-42208 (SQL Injection in LiteLLM Proxy) Open

OWASP/Nettacker#1548 · 2 comments · 1 assignee · Opened May 11, 2026
CVE-2026-41940 cPanel auth bypass module needed Open

OWASP/Nettacker#1543 · 7 comments · 1 assignee · Opened May 5, 2026
HTTP modules with .. in the URL path are silently broken (aiohttp/yarl normalize before sending) Open

OWASP/Nettacker#1532 · 4 comments · 1 assignee · Opened Apr 26, 2026
Enhancement: Improve detection accuracy and clean up negative matching across multiple modules Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

OWASP/Nettacker#1521 · Opened Apr 18, 2026
Duplicate Entries in Scan Results Degrading User Experience Open

OWASP/Nettacker#1513 · 1 assignee · Opened Apr 14, 2026
CVE-2026-2699 ShareFile detection module needed Open

OWASP/Nettacker#1509 · 1 comment · 1 assignee · Opened Apr 13, 2026
CVE-2026-34197 Apache ActiveMQ module needed Open

new module

OWASP/Nettacker#1507 · 1 comment · 1 assignee · Opened Apr 10, 2026
Add basic spellchecking support for documentation Open

Difficulty 3/5 1-2 days Newbie friendliness 55/100

OWASP/Nettacker#1494 · 1 comment · Opened Apr 3, 2026
subdomain_takeover_vuln Flexbe and Uptimerobot false positives? Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 57/100

OWASP/Nettacker#1491 · 4 comments · Opened Apr 2, 2026
[Security] API access key generated with non-cryptographic PRNG Open

OWASP/Nettacker#1463 · 4 comments · 1 assignee · Opened Mar 28, 2026
Add Vuln Module for NextJS Middleware Bypass CVE-2025-29927 (CISA KEV) Open

Difficulty 2/5 1-3 hours Newbie friendliness 82/100

OWASP/Nettacker#1449 · Opened Mar 25, 2026
[Feature Request] Support for Variable Persistence (Outputs) in YAML Modules Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

OWASP/Nettacker#1436 · 1 comment · Opened Mar 21, 2026
UI enhancement: dynamic module browser for scalable module selection UI Open

Difficulty 5/5 Over a week Newbie friendliness 42/100

OWASP/Nettacker#1425 · 5 comments · Opened Mar 19, 2026
Time for a new release? Open

answered

OWASP/Nettacker#1423 · 1 comment · 1 assignee · Opened Mar 19, 2026
Web UI main.js contains multiple runtime bugs and some redundancies in crawler view and pagination Open

Difficulty 3/5 1-2 days Newbie friendliness 55/100

OWASP/Nettacker#1419 · 2 comments · Opened Mar 18, 2026
Arbitrary code execution via exec() in response_conditions_matched Open

duplicate

Difficulty 2/5 1-3 hours Newbie friendliness 48/100

OWASP/Nettacker#1408 · Opened Mar 15, 2026
feat(reporting): Enhance CSV, extend JSON schema, and add Markdown export Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

OWASP/Nettacker#1394 · 3 comments · Opened Mar 12, 2026
Outdated documentation referencing removed whatcms_scan module Open

Difficulty 1/5 1-3 hours Newbie friendliness 68/100

OWASP/Nettacker#1391 · 5 comments · Opened Mar 11, 2026
Proposal: Metabase Local File Inclusion - CVE-2021-41277 (CISA KEV) Open

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

OWASP/Nettacker#1390 · Opened Mar 11, 2026
Add unit tests for socks_proxy.py Open

Difficulty 3/5 1-2 days Newbie friendliness 50/100

OWASP/Nettacker#1385 · 2 comments · Opened Mar 10, 2026

OWASP/Nettacker

Get new issues in your inbox