Static and dynamic JavaScript analyzer for detecting DOM-based XSS sources and dangerous sinks in web applications. - legacy-so/domxss_hunter

P-02 | OWASP Top 10 web vulnerability scanner with AI-powered exploit suggestions - jmsD3v/webhunter

Converts ATR Rules to Google SecOps Yara-L Rules. Contribute to ajaynyayapathi/ATR-to-Yara-L-Converter development by creating an account on GitHub.

YARA-backed SOC detector with a live dashboard: real-time file monitoring, time-windowed auth telemetry correlation, and in-place triage. Stdlib-only server. - gocar112/security-suite-dashboard

F-02 | Static malware analyzer — PE analysis, YARA-lite rules, entropy, IOC extraction, AI verdict - jmsD3v/malwarescope

PHP + MySQL Web 安全教学靶场，包含 8 个典型 Web 漏洞、漏洞复现、修复版本及渗透测试报告。 - shayebuhui23/vuln-campus-cms

A web-based Network Vulnerability Scanner built with Python, Streamlit, Nmap, and MariaDB. It scans networks for open ports and running services, stores scan results, and presents security informat...

Contribute to guguguc/c2 development by creating an account on GitHub.

Complete, practical Google Cloud Professional Security Operations Engineer study guide. Features YARA-L detection rule engineering, Google SecOps (SIEM/SOAR) setups, Security Command Center archite...

Complete, practical Google Cloud Professional Security Operations Engineer study guide. Features YARA-L detection rule engineering, Google SecOps (SIEM/SOAR) setups, Security Command Center archite...

IPv6 DNS takeover & NTLM relay attack chain in Active Directory using mitm6 — covering DHCPv6 spoofing, LDAP/LDAPS relay, passback attacks, and blue-team defenses. - mehedi-hasan-sami98/mit...

Agent of Death is an AI powered AI Agent vulnerability scanner. - Deaths-Head-Software/Agent-of-Death

可恢复的 DSH 渗透测试模式：资产归档、证据复核、断点续跑与 Web 可视化. Contribute to baianquanzu/dsh-pentest development by creating an account on GitHub.

Self-contained Red vs Blue cyber range lab simulating a Cookie Reuse & MFA Bypass vulnerability (XSS session replay) with full attack telemetry for Blue Team forensics. - DarthWakamiya/Cybe...

Experimentation. Contribute to J-Dheeraj/AI-exploit-CVE development by creating an account on GitHub.

Red vs. Blue CTF lab: stored XSS → cookie theft → MFA bypass via session replay, with Blue Team log forensics. Dockerized, single-VM deployment. - christopherbaptista/red-blue-ctf-lab

GhostLock (CVE-2026-43499) app for the Galaxy S26 series - 1ndevelopment/ghostlock-s26

Cloud-native malware analysis engine utilizing Explainable AI (SHAP) and Threat Intelligence. Replaces black-box AV verdicts with forensic reports. Features PE/ELF analysis, YARA heuristics, XGBoos...

千星计划漏洞挖掘项目. Contribute to duskto/All_Stars development by creating an account on GitHub.

A hands-on foundation in memory corruption, fuzzing, crash triage, and mitigation bypasses (from lab setup through CVE research to exploit development). - TheMalwareGuardian/Binary-Exploitation