Desktop MITM, web testing & network analysis suite: transparent proxy with QUIC blocking, live SNI/host monitoring without CA, vulnerability scanner, fuzzer, Collaborator OOB, HAR export, a...

Static analysis of an XWorm RAT delivered via a 12-layer encrypted PowerShell loader (RunPE + C2 recovery) - voidrelic-security/xworm-analysis-2026

Burp Suite extension: passive check for missing or weak HTTP security headers on in-scope responses (Montoya API). - Excession-Labs/burp-security-headers

Burp Buddy is a Burp Suite extension that integrates Large Language Models (LLMs) to assist security researchers with vulnerability analysis, attack vector generation, and HTTP traffic understandin...

Plateforme de formation DevSecOps à la demande : Terraform (Scaleway), GitLab auto-hébergé, Kapsule + Argo CD, pipeline de sécurité Java (GitLab CI, Jenkins, Bitbucket) - aboigues/devsecops-lab

Tested Sigma and YARA examples with synthetic cloud events and a local harness. - harshacreate/detection-rules

Contribute to netstar-labs/yarrow development by creating an account on GitHub.

PurpleHawkS helps Elevating Defense through Sharp-Eyed Attack Intelligence - chandraktrivedi/PurpleHawkS

Contribute to Joelndege/Cross-Site-Scripting-XSS-Testing development by creating an account on GitHub.

Writeups for SEED Labs web attack labs: SQL injection, CSRF and XSS against Elgg and a PHP/MySQL app, with payloads and screenshots. - Khushbu-H-Patel/seedlabs-web-attack-writeups

A passive Burp Suite extension that maps website functionality from captured traffic, recommends attack vectors with supporting evidence, and guides manual testing with checklists, Focus Mode, inve...

Flask app with vulnerable and fixed modes: SQLi, XSS, CSRF, SSRF, IDOR. 43 exploit tests. - braylo-ai/owasp-vuln-vs-fixed

Proof of concept for GHSA-xqc2-xf4c-x3h3 - unauthenticated RCE in React Server Components via typed-array transport desynchronisation (react-server-dom-* 19.2.8, fixed in 19.2.9) - rudSarkar/GHSA-x...

How publishing an OCI artifact turns a routine pull into SSRF, stored XSS, DoS, and more — companion research for DEF CON 34's "No Socket, No Privs, No Problem." - gouldni...

Contribute to s3c4ct0r/AdaptiHound-SE development by creating an account on GitHub.

NetChess 2.1 SEH buffer overflow (0-day) — original vulnerability research with a working PoC, published on Packet Storm. - Eminli/0Day_NetChess

Runtime-configurable mailer for Symfony on top of Instance Settings: DSN from the admin UI on every send, DSN and sender validation with an SSRF host guard, test e-mail, Resend key check, sent-mail...

Editorial headless CMS and block page builder: collections, revisions, Kanban, SSRF-safe webhooks, scheduled publishing, secure headless API. Next.js 16, tRPC v11, Prisma 7, Better Auth. - ssrjkk/v...

Application level vulnerability scanner. Contribute to RobinTheMan/Vulnerability-Scanner development by creating an account on GitHub.

Granite-powered vulnerability exploitation research and prediction for Sheridan Datathon 2026 - SarasGunjan/Tell

W tym repozytorium znajduje się prezentacja oraz zadania dla grupy na temat podatności XSS. - michalpatola/XSS-projekt