Supervised penetration-testing orchestrator in Go with SARIF 2.1.0 compliance, Dockerized scanners, and SHA-256 audit trails. - lucasmartins-ai/lookapentest

CVE-2026-82286 — gpt-crawler <=1.5.1 unauthenticated arbitrary file write via outputFileName (POST /crawl). PoC + self-contained Docker lab. CVSS 8.6, CWE-22. - BiiTts/CVE-2026-82286-gpt-cra...

Contribute to Kyuda1-0/ttd-xss-poc development by creating an account on GitHub.

Improves vulnerability prioritization by enhancing CVSS scores with exploit intelligence. Combines data from CISA KEV, EPSS, Metasploit, and other sources to create actionable severity ratings that...

WooCommerce plugin: safe formula-based product pricing, closing CVE-2026-4001's eval()-based RCE - htrxuan/hdwebmobile-formula-pricing

Contribute to RootKaito/nuclei-community-templates development by creating an account on GitHub.

Blue-team/SOC scripts — brute-force log detection, YARA rule testing, and hash identification/cracking. Companion repo to Bugbounty (red-team toolkit - toradesourav/Soc-Blue-team-toolkit

Vue 3 and NestJS toy project demonstrating layered Stored XSS defenses - edgarshlee/secu-toy-stored-xss

Community-driven repository for YARA rules, threat hunting signatures, and behavioral detection logic created during malware analysis and reverse engineering. - ayush-malwarex/threat-hunting-rules

Contribute to Stuck1224/burp_gzip_encoder development by creating an account on GitHub.

A web vulnerability scanner is a security tool that automatically scans web applications to detect critical flaws such as SQL injection, HTML injection, and cross‑site scripting (XSS), helping deve...

A POC of using vector embedding based on content in confluence for usage by Gen AI - robdabell/ConfluenceMemory

Slack enumeration and exposed secrets detection tool - PaperMtn/slack-watchman

Libra-Nextgen. Contribute to SmaZone2020/Libra-Nextgen development by creating an account on GitHub.

Reproduce log4j2 #4255 deserialization RCE in Docker with JDK 17, validate mitigations, and test detection controls. - Clarapotbellied1003/log4j-4255

Python vulnerability scanner for penetration testing practice — port scanning, banner grabbing, outdated software detection, and HTTP security header audits with severity-ranked reports. - vickybad...

Structured file triage with YARA rules featuring hashes, file-type detection, safety controls, and JSON reports. - dornelasdev/yara-scout

Contribute to Per0x1de-1337/log4j2-4255-lab development by creating an account on GitHub.

Backup BitLocker recovery keys and audit CVE-2026-45585 on Windows with a portable CLI and GUI tool. - aungko186/YellowKey-BitLocker-CVE-2026-45585

Web security scanner built with Python and Flask. Crawls authorized same-domain targets, analyzes URL and HTML form parameters for SQL Injection and Reflected XSS indicators, and generates downl...