对多目标批量验证漏洞修复情况的跨平台工具. Contribute to Pick-program/poc-batch-verifier development by creating an account on GitHub.

A simple web vulnerability scanner tool . Contribute to s8109180-byte/web_scanner development by creating an account on GitHub.

Python-based Web Vulnerability Scanner using Nmap, Nikto, Wafw00f, DNSRecon, Wapiti and other security tools. - PranshuCyb3r/webvulnebilityscanner

一个基于 Vue 3 的纯前端防钓鱼测试网站，参照北京大学 Phishing Quiz 设计。. Contribute to SoraKasvgano/phishingtest development by creating an account on GitHub.

CodeGuard MCP是一款实时AI代码安全扫描工具，用于检测AI生成代码中的漏洞、密钥和合规性问题，适用于开发环境中的代码安全审查。 - xby-skill/xby-scan-code

Contribute to deshmanesakshi4-bit/java-vulnerability-scanner development by creating an account on GitHub.

A Python-based web application security scanner for detecting common security misconfigurations and generating security reports. - Shumii98/Web-App-Vulnerability-Scanner

Multi camera gathering and exploiting tool. Contribute to M0tHs3C/Argo development by creating an account on GitHub.

Contribute to kdjebat/DLL-Search-Order-Exploit-POC development by creating an account on GitHub.

由夜安团队研发开发的AI渗透测试平台，涵盖红队打点、SRC、CTF，特别是在红队领域有极为亮眼的存在 - Yean-Sec/StrikeAgent_AtkBrain-Flash

Malware Detection – A lightweight, cross-platform scanner that identifies malicious files and processes using signature-based matching, heuristic analysis, and real-time behavior monitoring. Built ...

基于deepseek-hraness+kali搭建一套属于自己的AI渗透测试工具，用多代理 AI 跑完整渗透测试，我把它做成了可复现、防幻觉的工作流。一句话：给定目标与授权，自动完成信息收集 → 扫描枚举 → 认证突破 → 漏洞分析 → 深挖循环 → 框架专项 → 后渗透验证 → 主审复核 → 标准报告 的全流程，并输出一份带真实抓包证据的 12 章渗透测试报告。 - caoxianglu/...

A Burp Suite extension that scans for CORS misconfigurations with 35+ techniques directly inside BurpSuite. - halilkirazkaya/hkcors

guestbook app with intentional XSS vulnerabilities, for authorized web pentesting practice only, with simple stored and reflected XSS - hamdy62/XSS-lab

Contribute to Cxyofficial/K50G-POCOF4GT-CVE-2026-43499-PoC development by creating an account on GitHub.

DOMPurify-powered HTML sanitizer for Svelte — SSR-safe, browser-ready, TypeScript-first. - humanspeak/svelte-purify

Exploitation des vulnérabilités sur la version vsftpd 2.3.4 du service ftp (CVE-2011-2523) - aboubacar70/LAB1-metasploitable

Minimal-request SQL injection confirmation tool (error/boolean/time triage, surgical extract of database()/user()). | 极简请求SQL注入确认工具（错误/布尔/时间三向分流，精准提取database()/user()） - JiuZero/wafx

Lightweight HTTP/S Command & Control framework for authorized red team operations - amooryx/phantom-c2