Introduction

VulnCheck Initial Access Intelligence Community Edition is a free, community-tier index of the exploits and detection artifacts that VulnCheck publishes in the open-source initial-access-community repository.

The repository contains exploits and associated artifacts from VulnCheck's commercial Initial Access Intelligence product, along with community contributions. The initial-access-community index turns that repository into structured, machine-readable records, one per vulnerability, available from the same API as every other VulnCheck index.

What's included in Initial Access Community?

Initial access vulnerabilities are typically network-based, don't require user interaction, and are preferably exploitable without authentication. Typical targets include routers, VPNs, self-hosted services, network appliances, B2B applications, and IoT devices.

For each vulnerability, the record describes the artifacts available in the repository. When possible, these include:

• An exploit written in Go with VulnCheck's go-exploit framework, often with a target verifier and a version scanner
• Packet captures (PCAP files) of successful exploitation
• Snort and Suricata rules that detect the exploit on the network
• Sigma and YARA rules
• A vulnerable target Docker environment to test against
• Shodan, Censys, FOFA, ZoomEye, GreyNoise, Google, and Baidu queries for measuring Internet exposure
• MITRE ATT&CK techniques
• go-exploit module metadata: the exploit type, protocol, default port, supported C2 types, CPEs, and custom flags

Each record links back to the vulnerability's directory in the repository, where the exploit code and detection artifacts live.

How do I access it?

• API: query the initial-access-community index, or download the whole index as a backup. See API / Schema.
• Git: clone the repository directly to get the exploits and detection artifacts themselves.

git clone https://github.com/vulncheck-oss/initial-access-community.git

API access requires a free VulnCheck Community account. Sign up at https://console.vulncheck.com/.