Flags an outbound HTTP call using an endpoint parameter validated only with startsWith/contains against a raw URL string. - GapHunterLabs/ssrf-allowlist-bypass-companion

Targeted API Security Assessment: BAC, IDOR, SSRF & SSTI — Redox Engine (Scoped WSTG) - Davit777888/Redox-Web-Security-Testing-Methodology

Burp Suite full-control MCP extension and stdio bridge - rylena/burpsuite-mcp

Automated web application vulnerability scanner with SQLi, XSS, traversal, CSRF, and header detection - d1n35h703/VulnHawk-Pentest

A comics about the latest security incident where a swarm of openai AI agents infiltrate hugging face, how and why - MathFrenchToast/exploit-hf-openai-comics

Root My Galaxy exploit payloads — adds Samsung Galaxy S22+ (SM-S906B, S906BXXSNGZD7, kernel 5.10.237) support - Memetic0/Root-My-Galaxy-Payloads

A beginner-friendly Python vulnerability scanner for detecting basic security issues in a controlled local environment. - shauryagupta0106-bit/basic-vulnerability-scanner

XSS, Session Management & Authentication Resilience Assessment - Loveadeyinka/CIPA14-LAB4

Burp extension client and backend service that will enable two-way communications between Guard and the engineer on web application assessments - praetorian-inc/courier

An advanced Python-based vulnerability scanner with port scanning, service detection, banner grabbing, CVE mapping, risk assessment, reporting, and SQLite integration. - MahmoudAymanNoureddine/Adva...

KWT5H13LD is an open-source blue team security toolkit designed to protect, audit, and harden your infrastructure. One tool for everything — from cloud misconfiguration detection to incident respon...

Vulnerability scanner whose every result is a reproducible, signed claim. Pins the lockfile, the OSV feed, the version comparators, and the exclusions to four digests inside a signed in-toto predic...

Agent-first, headless web security testing CLI. Contribute to rylena/burpsuite-cli development by creating an account on GitHub.

Lab 4 - XSS, Session Management and Authentication Resilience Assessment on DVWA and Mutillidae II - Ransome-sitara/CIP-A104-Lab4-XSS-Session-Auth

Access the complete GTA 6 Cyberleek source files for download, including scripts and assets, optimized for Windows 10/11. - intheflesh-seconddegreeburn8572/GTA-6-Cyberleek-Source-Files-Download

Local heuristic file scanner for Windows - explainable detections, human-verdict quarantine, desktop triage app - alyaanj-ux/sentry

Spicy malware 0day. Full kill-chain malware: exploit, pivot, c2, persistence. Rust converted to pseudo-code - if you're smart you can build it youtself. - abraxas/veneficus-implant-public

🛡️ 每日 CVE 高危漏洞简报 (CVSS≥7.0 或 CISA KEV) · 自动从 cvelistV5 同步 · Powered by VitePress - laserduor/cve-daily

A shellcode generator supporting common payload formats. - RTS-Framework/GRT-MXLoader

A hands-on web application security lab covering SQL injection, XSS, LFI, directory enumeration, information disclosure, Burp Suite, and insecure session handling using DVWA and Mutillidae in an is...

Jingwei 是一套面向红队/紫队场景的**全生命周期自动化渗透测试平台**。以“模拟高级威胁组织攻击行为”为核心设计理念，覆盖从外部侦察到内网全域占领的完整攻击链路。 - Domren/Jingwei