用于在企业中个人使用的渗透测试报告生成器（本人也在用）. Contribute to wyclwywy/Penetration-test-report-generator development by creating an account on GitHub.

检测中转 API 服务是否存在提示词注入、上下文截断、指令覆盖等作恶行为的审计工具. Contribute to Jimmy102836/api-checker development by creating an account on GitHub.

反序列化漏洞靶场. Contribute to hujiaozhuzhu/fanxulieh-bachang development by creating an account on GitHub.

使用ts的信息收集程序. Contribute to aceliuchanghong/info_collect_ts development by creating an account on GitHub.

CVE-2026-5027 - Langflow Path Traversal to Remote Code Execution (CVSS 8.8) - yahiahamza/CVE-2026-5027

一个调试用插件，向框架注入Patch，将所有对llm的调用进行选择性的log. Contribute to NekyuuYa/astrbot_plugin_llm_log_hook development by creating an account on GitHub.

NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Redirects, leveraging advanced scanning and URL enumeration te...

A simple and minimal project designed to scan for axios supply chain attack (CVE-2026) IOCs - ssynical/axios-scanner

PaperLab：一款由 AI 驱动的 OSCP 纸上渗透靶场。支持提取真实通关笔记，通过大语言模型执行变异衍生，无限生成具有严密逻辑链的全新推演靶机。 - cxtwit/PaperLab

E-mails, subdomains and names Harvester - OSINT . Contribute to laramies/theHarvester development by creating an account on GitHub.

SSRF Vulnerable Lab — Server-Side Request Forgery testing target (PHP). - invicticoreteam/SSRF_Vulnerable_Lab

This lab preforms threat hunting by detecting adversary behavior using Splunk. A real-world credential dumping attack is used in this investigation. - Sha674/splunk-siem-credential-dumping-lab

🛡️ Full-stack OWASP Top 10 web vulnerability scanner — async crawling, SQLi/XSS/SSRF/LFI detection, ML severity classification, CVE enrichment via NVD API, real-time WebSocket dashboard & a...

Contribute to mana-ito/csrf-poc development by creating an account on GitHub.

Contribute to MrHarshvardhan/python-burp-collaborator development by creating an account on GitHub.

Cross platform (Linux / Windows) shellcode packer for CTFs and pentest / red team exams aiming for AV evasion ! - mochabyte0x/CTFPacker

POC for CVE-2026-23416 (linux kernel 6.17-linux kernel 7 rc5) - vulnerability discovered by Antonius - bluedragonsecurity/CVE-2026-23416-POC

知识点关于数据库注入的原理和绕过姿势. Contribute to R1d3r666/sql-nosql development by creating an account on GitHub.

C-headers to Pascal translation. Uses Python scripts with CLang AST library to transform CLang headers into Pascal declaration using Jinga2 templates. - tregubovav-dev/C2Pas-Jinja

一款适合新手的网站信息收集工具. Contribute to lkpnb/xxx-mods-scanner development by creating an account on GitHub.

CISA Advisory ICSA-26-055-03 (Update A) — Gardyn Home Kit IoT Vulnerabilities — 10 CVEs (CVE-2025-1242, CVE-2025-10681, CVE-2025-29628, CVE-2025-29629, CVE-2025-29631, CVE-2026-28766, CVE-2026-2519...