Laboratorio SPG Intranet - Penetration Testing & GRC - rjrb8/Laboratorio-pentesting-STTI-RCE

Agentic SOC automation engine: converts threat reports & live Elasticsearch logs into validated YARA-L 2.0, Sigma, and KQL detection rules using LangGraph + multi-provider LLMs. 98.8% IOC F...

Contribute to i-mrsam/Mr.SAM development by creating an account on GitHub.

Yue Plus - Burp Suite extension for IDOR/unauthorized access detection with HaE rule integration and sensitive-data row coloring - lem0n817/xia_yue_plus

Mass PHPUnit RCE vulnerability scanner & SMTP credential grabber for penetration testing - GhostCode403/phpunit-rce-scanner

cPanel/WHM vulnerability scanner with config leak detection, credential extraction, and automated login testing. - GhostCode403/ghost-cpanel-scanner

Crowdstrike Falcon 0day Privilege Escalation Vulnerability - MSNightmare/FalconFlank

Passive Rust threat-hunting for historical web logs: correlate public CTI with your logs into evidence-based, COUNT-only AWS WAF candidates - nishikawaakira/Shenron

ViperScan is a Python-based CLI tool for static malware analysis - file hashing, entropy checks, PE/ELF/Mach-O binary inspection, YARA rule scanning, suspicious string/IOC extraction, and VirusTota...

Lightweight Python vulnerability scanner for port scanning, service detection, outdated software checks, and security reporting. - Candyboyabrar/Vulnerability-Scanner

ReplayX（回响）Chrome MV3 侧边栏安全审计扩展 —— 构建产物发布仓库 | 抓包 · 拦截改包 · 重放 · Fuzz · AI 分析 - z-y-q/ReplayX-

Mondoo Vulnerability Scanner for IDEs based on the IntelliJ platform - mondoohq/mondoo-intellij-plugin

This lab involved working on the Kioptrix Level 1 vulnerable machine from VulnHub to practice basic penetration testing skills. I started by scanning and enumerating the target to find open ports a...

HFish 蜜罐威胁情报源 | High-fidelity Threat Feed derived from HFish honeypots (SSH/HTTP/DB attacks) with automated whitelisting. - anonymous99-Rise/honeypot-blocklist

PoC — SSRF via JS-rendering tier bypass of the URL safety filter in crw (GHSA-5jp3-339h-vxqw, CVSS 7.5). CVE pending. - squeeze440/crw-PoC

Contribute to madebyrokit/CVE-2026-40976-POC development by creating an account on GitHub.

A stealthy Command & Control (C2) framework using DNS over HTTPS (DoH) with Chrome 120 browser impersonation, AES-256 encryption, and 15+ post-exploitation modules. Bypasses firewalls and T...

Sentinel Enterprise v2.0 — Forensics & Vulnerability Scanner with RustScan Pipelining, In-Memory Stream DPI, React Flow Topology, and Virtualized Tables - nidhishv31-cpu/Sentinel-V2

Automated Google Dork Scanner & AI Payload Mutator for WAF Bypass (SQLi/XSS Mass Exploitation Suite). - junig33k/Unified-Security-Pipeline

RuoYi-Vue-Plus tenant_id SQL 注入复现脚本（XVE‑2026‑50962） - fangmjiu/RuoYi-Vue-Plus-tenant_id-SQLi

Enterprise level S3 scanner using a central yara rules DB. - moabid42/MalS3Scan