A curated, searchable index of hands-on CTF labs covering binary mitigations, stack overflows, ROP chain construction, heap exploitation, format string bugs, shellcode development, and malware reve...

Hidra - A12 / iOS 18.7.2 jailbreak research. Kernel entry via AppleJPEGDriver CVE-2026-20687. No public build yet. - hidra0x/hidra

若依历史系统复刻靶场 · 27 座安全测试站点（含故意保留的漏洞，仅供本地授权测试）. Contribute to xiabai2008/ruoyi-lab development by creating an account on GitHub.

Vulnerability Scanner for legal Penetration Testing with full permission. - Anish-Kushwaha/Scanner

Intentionally vulnerable Flask app for the talk "Breaking Python: AppSec vs. OffSec — From Code to Exploit". 9 classic web vulns (SQLi, command injection, LFI, XXE, XSS, SSTI, ins...

离线 Windows 主机应急响应与取证工具：采集主机、进程、网络、服务、计划任务与执行痕迹，保存为 SQLite 快照；使用本地 YAML 规则生成调查线索，并导出 HTML 报告与事件调查包。 - MoShouSecurity/Easy_Trace

CVE POC repo 자동 수집기. Contribute to zulloper/cve-poc development by creating an account on GitHub.

Final year B-tech main project in Blockchain domain. Vulnerability detection using ML based vulnerability scanner in smartcontract solidity code. - pavansai18r/SmartContract_Vulnerability_Scanner

A Python-based PHP website vulnerability scanner featuring authorized scope validation, DNS security checks, PHP fingerprinting, CVE-based vulnerability detection, risk analysis, and secure redirec...

xss-audit 一键安装｜React/TS/JS 静态 XSS 审计技能，14 层检查｜第三方一键部署方案 - JUTZUGC/xss-audit-deploy-guide

Burp Suite extension: copy the URLs of every selected table row to the clipboard - in Burp's own tables and in tables drawn by other extensions - Delt-A/burp-multi-url-copy

Non-destructive, probabilistic finder for hosts exposed to php2shell (CVE-2026-109618/109619). Blue-team triage; sends no exploit traffic. Authorised use only. - SecOpsLimited/php2shell-finder

Proof-of-concept exploit for CVE-2026-23744 (authorized testing / research only) - AhmadF77/CVE-2026-23744

Security Researcher | Web安全 / 渗透测试 / CTF. Contribute to Andyw0504/Andyw0504 development by creating an account on GitHub.

Contribute to Hercules03/burpSuite-HTTP-history-xml-exportation development by creating an account on GitHub.

HONOR x40gt竞速版 (ADT-AN00) 临时root脚本，包含电脑版和手机版提权. Contribute to aiicsu/HONORX40GTjingsuban-KernelSU-Root development by creating an account on GitHub.

Know which of your open source is malicious, exploited or going stale, and what to do about each one. Checks packages, SBOMs, lockfiles and container images against OSV, CISA KEV and EPSS. - ntavak...

ovos codesafe for WordPress — from the first threat to the verified patch. Connects a site to codesafe, which detects the attacks on it and the errors in its code, shields against the attack patter...

SIGMA & YARA rules created after the PHP2SHELL vulnerability discovered - tawheedahmed12-art/php2shell_threat_detection

Shieldsup Scanner is a robust vulnerability scanner with an integrated bug tracker. It simplifies the tracking and fixing of vulnerabilities across your systems. By combining naabu port scanning an...

Web Application Vulnerability Scanner. Contribute to rishikapandagre/WAVS development by creating an account on GitHub.