Static Application Security Testing (SAST) & Live CVE Dependency Scanner (SQLi, RCE, LFI, XSS, Secrets) mapped to OWASP Top 10 & CWE - PrattayDev/vulnguard-sast

Hands-on web application security testing using Burp Suite, DVWA, and Dirsearch. Practiced HTTP request interception, SQL Injection, Reflected XSS, and Stored XSS in a safe lab environment. Explore...

**Python-Based Vulnerability Scanner | Python, Flask, Socket, SSL, Requests, Linux/Kali Linux** Developing a Python-based security assessment tool featuring TCP port scanning, IP resolution, SSL/T...

A Python-based Web Vulnerability Scanner that identifies common web security issues, including missing security headers, insecure configurations, and exposed resources. It generates scan results to...

本仓库记录VulMPFF发现的14个零日漏洞案例，介绍从模型筛查、人工分析到复现验证的具体过程。. Contribute to HMF2021/VulMPFF-ZeroDay-Cases development by creating an account on GitHub.

Malware Checker & Decryptor: static PE/ELF scanning, YARA rule matching, XOR/RC4 string decryptor, packed sample unpacker - ClipSanninExist/malware-checker-decryptor

Some Shiro exploits, for student use. Contribute to Mengde-ir7/ShiroKit development by creating an account on GitHub.

Practical laboratory works and security research on Web Application Security (HTTP, SOP/CORS, Input Validation, DOM/XSS, IDOR/BOLA, SQLi, and CSRF) on Ubuntu Server. - nematmaxmudov76-max/web-appli...

Security research and proof-of-concept scripts for three CVEs in Krayin CRM, fixed in 2.2.7 (IDOR, BOLA, SSRF via DNS rebinding). Reported responsibly. - 0xAdham1/krayin-crm-2.2.7-POC

A vulnerability management SaaS platform & reporting assistant for pentesters. It aggregates scan results (Nmap/Nuclei) from a local CLI, performs triage & CVSS calculation, and com...

Contribute to pro-rider/Web-Vulnerability-Scanner development by creating an account on GitHub.

Advanced software dependency vulnerability scanner and risk analyzer built with Python. - Alwin0606/DependencyGuard

Contribute to yahyaeb/jenkins-release-notification-poc development by creating an account on GitHub.

Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM - horizon3ai/CVE-2026-106173

Authorised-lab red-team tools (DNS + ICMP C2). Counterpart to plaintext-suite. - DhWonder/redline-suite

A hands-on web application security audit using DVWA, Burp Suite, and the OWASP Top 10. Focuses on identifying SQL injection and stored XSS vulnerabilities, analyzing source code, implementing secu...

資安戰情室開源專案：用 n8n、Gemini 與 Vue 自動彙整 CVE 漏洞與資安日報. Contribute to letswritetw/letswrite-vuln-digest development by creating an account on GitHub.

Denon Prime 4+ (Engine OS 4.3.4) security research: launcher RCE, /data persistence, Docker/QEMU lab - coffeegrind123/denon-prime4plus-research

VulnScan AI is an AI-powered source-code vulnerability scanner with a built-in code runner. It supports Python, JavaScript, Java, C, and C++, combining rule-based security checks with Groq AI analy...

ErraticGopher 是一款面向渗透测试与红队演练的综合武器. Contribute to Gh0xE9/erraticgopher development by creating an account on GitHub.

Android stalkerware analysis: "wan yi dian" data_collector module — IOCs, YARA rule & report. No samples hosted. - Prime-Eden/wydapp-data-collector-analysis