A Java-based cybersecurity vulnerability scanner that identifies common security weaknesses such as open network ports and missing HTTP security headers, providing users with a clear security repor...

A chained multi-service vulnerable web app: SSRF into an internal-trust bypass, leaked JWT secret, forged admin auth, and SSTI-to-RCE, fully automated end to end. - oxihash/vulnhub-web

A local attack range and conformance checker for SSRF defenses in HTTP clients: 10 probes, 3 clients, verdicts measured with a canary and a hit counter. - roshan-amble/ssrf-lab

A Java-based cybersecurity vulnerability scanner that identifies common security weaknesses such as open network ports and missing HTTP security headers, providing users with a clear security repor...

Autonomous AI agent with its own crypto identity — hunts CVEs, builds exploit labs, validates vulnerabilities (first public PoC of CVE-2026-86283), trades crypto 24/7 to fund itself. Sentric Resear...

CICD Compass is a production-grade educational and reference DevSecOps application built with Spring Boot (Java 21) and an interactive, dark-themed Mission Control Dashboard. It models and visualiz...

YARA rules + hybrid scanner untuk deteksi keluarga malware APK Android (static analysis) - Khamami13/android-malware-yara

POC com alguns exemplos e testes para analisar o comportamento do Spring em relação a transação - henrickdaniel/transaction-poc

MalDev-C — Técnicas de desarrollo de malware en C para operadores de Red Team. Inyección de procesos, ejecución de shellcode, hooking de APIs, evasión de AV/EDR, persistencia y fundamentos de C2. W...

XSSAM is a professional XSS Reconnaissance & Validation framework for authorized bug-bounty testing. Featuring an async crawler, JS endpoint mining, and context-aware mutations, it uses Pla...

Automated recon & vulnerability discovery suite for authorized security testing. Five scanners — SQLi, XSS, SSRF, Open Redirect, Path Traversal — with 896 payload templates, OOB callback co...

SeleniumBase MCP Servers. Browser automation that bypasses anti-bot systems and handles web-scraping. - seleniumbase/seleniumbase-mcp

Batch retrohunt orchestrator across hundreds of YARA-L detection rules for Google SecOps using secops-wrapper SDK with concurrency limits and safe alerting controls. - hzmndt/google-secops-batch-re...

Python + Nmap network vulnerability scanner with a GUI, built to learn service detection and CVE analysis workflows. - rufaidaafrin/vulnerability-analysis-tool

钓鱼演练-用户端-系统设置. Contribute to lalazi-tech/PhishSettings-v2.0 development by creating an account on GitHub.

Repo for Yara rule generation and validation. Contribute to rajramdsci/yara-research development by creating an account on GitHub.

Automated web vulnerability scanner with 3 modes (quick/standard/detailed). Detects SQLi, XSS, LFI, CMDi, SSRF, XXE, GraphQL introspection, sensitive files, misconfigurations, and more. - RiloArbab...

Contribute to DiegoArias008/CVE-2026-20079-checker development by creating an account on GitHub.

GhostLock CVE-2026-43499 Redmi K40 (alioth 4.19.157) adaptation - ccp-p/ghostlock-cve-2026-43499-4.19-k40