Open-source vulnerability scanner for infrastructure and software packages - dakotasnapshot/vulnscan

An Automated BOLA/IDOR Vulnerability Scanner for REST APIs - Radhikajain09/AutoBola

OWASP SKF labs: Session Hijacking through XSS lab, run with Isoloom - CyberCTF/skf-session-hijacking-xss

基于 OWASP Juice Shop 靶场环境，针对现代单页面应用（SPA / Angular + Node.js 架构）开展手工渗透测试。不依赖自动化扫描器的盲打结果，使用 Burp Suite 与浏览器开发者工具，完成juice shop挑战 - HJia-shh/OWASP-Juice-Shop

An Automated BOLA/IDOR Vulnerability Scanner for REST APIs - 2024a1r031/AutoBOLA

Python-based network vulnerability scanner with security assessment reporting and a Streamlit dashboard - mtt8487-cmyk/vulnscope-python

A Python-based static malware analysis tool for Windows PE executables with YARA detection and automated report generation. - NINTEX11/Static-PE-Malware-Analyzer

Intentionally vulnerable Flask lab: SQL injection, stored XSS, IDOR and brute force, each with an exploit script and a secure fix side by side. Run locally only. - omerrkayaa/owasp-mini-lab

Fast link previews for Rust: reads the <head> and stops, one-pass Open Graph parser, SSRF-safe, coalescing cache - 0x0077/ogpeek

ClickFix lures, legit-service C2, delivery and initial-access tooling — red-team framework (Python 3.11+) - galaxytrip5/redveil

Exploited-CVE-Watch. Contribute to CYBERMED1C/Exploited-CVE-Watch development by creating an account on GitHub.

A full-stack web vulnerability scanner and security dashboard built with Python, Flask, and JavaScript to analyze security headers, payload vulnerabilities, and web application security configurati...

ANE-Exploit. Contribute to SKVLENT/ANE-Exploit development by creating an account on GitHub.

PoC: MSDO checkov external-checks-dir RCE via PR-root .checkov.yaml - PDFtoMark/gab-poc-msdo-checkov

检测 OpenSSH + musl 无 PAM 环境的密码认证绕过（* 锁定账户）. Contribute to yanxinwu946/musl-ssh-bypass-scan development by creating an account on GitHub.

CVE-2026-102334 nginx proxy manager Exploit . Contribute to davidoberst/CVE-2026-102334 development by creating an account on GitHub.

Analyzed Agent Tesla malware and developed YARA and Sigma rules to detect its behavior. - bran-dot-flake/Agent-Tesla-Malware-Analysis-and-Detection-Engineering

[ghassess sandbox] Protection exists but admins can bypass: ruleset with 'always' bypass for repo admins + org admins, and classic protection without enforce_admins. - CICD-Test-Ric...

[ghassess sandbox] Hardened default branch via repository ruleset (2 approvals, code owners, status checks, signed commits, linear history, no bypass) + tag ruleset. - CICD-Test-RichF/bp-strong

nginx CVE-2025-50579 CORS Exploit . Contribute to davidoberst/CVE-2025-50579 development by creating an account on GitHub.

CVE-2026-102334 nginx proxy manager Exploit . Contribute to davidoberst/CVE-2026-102334-exploit development by creating an account on GitHub.