Lockfile vulnerability scanner in Go: 7 formats, OSV.dev, CVSS scoring, alias merging, SARIF + GitHub Action. Matches osv-scanner 90/90 on a 600-package project. - Revind4k/lockscan

Static analysis of seven CRPx0 ransomware builds: recovery tool, implementation faults, YARA/KQL/Elastic detections, independent reproduction. No samples. - Weirdlogic/crpx0-static

Python-based C2 beacon detection using connection timing analysis, with improved CSV error handling and automated tests. - Yugsalecha812/c2-beacon-detector

Contribute to DoanTien09/shellcode_evasion_framework development by creating an account on GitHub.

RCE standard host libraries: pure-RCE crypto, ML-KEM/PQXDH, HPKE and MLS - openIE-dev/rce-stdlib

#. Contribute to nowak0x37/Java-Insecure-Deserialization---Burp-Suite-Extension development by creating an account on GitHub.

PayLedger is a web-based payment application that addresses two major security vulnerabilities: Stored Cross-Site Scripting (XSS) and Insecure Direct Object References (IDOR). It aims to prevent ma...

CVE-2026-64507 — PoC: IBPB flush on BPF JIT allocation - manalejandro/CVE-2026-64507

Self-hosted uptime monitor that shows why a check failed: phase timings, failure classes, incidents, SSRF-safe probing. FastAPI + Postgres + React. - TheInfiniteLoop22/SignalNest

SSRF-safe HTTP(S) fetch utilities backed by undici - vercel-labs/guarded-fetch

Writeup e report tecnici dei laboratori PortSwigger Web Security Academy — SQL injection, XSS, SSRF e altre vulnerabilità web. Esercizi a scopo formativo. - leonardoonori1-ops/PortSwigger-Academy

Create repository. Contribute to dakhilotmane045-ai/xss-lab development by creating an account on GitHub.

Public research and safe local PoC for LaraDashboard stored XSS via SVG upload (GHSA-9gxw-qpx8-x9c7) - capivara-research/GHSA-9gxw-qpx8-x9c7

A slightly more robust version of MaherAzzouzi's POC, created by my agent on the fly during testing. - hoodoer/VsockDrop-Adapted-CVE-2026-53365

JsOwl —— Go 编写的 Web 安全信息收集利器。集 JavaScript 信息收集、API 端点提取、敏感信息扫描、攻击面梳理 于一体，同时提供 CLI 工具与 Go 库。内置 direct / browser / auto 三种采集模式，兼容 HaE 规则，支持登录态扫描、运行时交互、AI 辅助分析与 MCP Server，输出 JSON 与交互式 HTML 报告，是渗透测试、红...

Go-based network exploitation and MITM framework for authorized penetration testing, network reconnaissance, traffic interception, wireless security testing, and Layer 2/3/7 attack research. - QYVO...

Enterprise-Grade Asynchronous Web Security Assessment & Vulnerability Scanner - Krish9800/web-security-scanner

Extension logger written by Python for working with Burp Suite - leediay153/API_Logger_Extension_For-Burp

x64 process injection PoC combining shared-section memory mapping with thread context hijacking to execute shellcode in a remote process, resolving all Nt* functions via PEB walking and hash-based ...

NightTrace 是一个轻量级 Windows 主机痕迹采集与可视化工具，面向已获授权的应急响应与入侵痕迹排查场景。 在目标主机上运行单个 PowerShell 脚本即可只读采集进程、注册表 Run/RunOnce、计划任务与 Windows 服务， 打包成带时间戳的 ZIP；在本机启动 Flask 页面导入 ZIP，即可在一个暗色控制台里检索、排序、筛选并展开 每一条痕迹的原始数据。采...

基于 Cloudflare Workers 的边缘邮件安全网关：防轰炸频控、防钓鱼仿冒、恶意附件过滤与三级智能分流 - Daey886/cf-edge-gateway