我针对常见的网络漏洞（如跨站请求伪造（CSRF）、跨站脚本攻击（XSS）和不安全的直接对象引用（IDOR））的概念验证脚本。 - LanSang11/web-vuln-pocs-web-

汇总溯源月中与月末汇报，保存各项课程与项目成果、进度. Contribute to Zhaok-123/Study_Project_Zhaok development by creating an account on GitHub.

钓鱼邮件分析技能包 - Claude Code Skills for phishing email analysis and tracing - gatsby-sec/phishing-analysis-skills

Contribute to Saku0512/CVE-2026-35585-poc development by creating an account on GitHub.

本项目旨在构建一个全面、系统化的代码审计技能知识库skills。代码审计是软件安全开发生命周期（SDLC）中至关重要的一环，通过使用AI+自动化工具调用skills分析源代码，识别潜在的安全漏洞、逻辑漏洞。本项目适用于安全从业人员，开发/测试工程师，可用于使用AI提效，加快代码审计的速度、降低误报和漏报率。 - Wat1rMel0n/JavaCode-Audit-skills

⭐️ Patched Full Pro Unlimited 2026 | Ninja Download Manager Pro Repack Speed Acceleration Resume Batch | Secure Installer Mirror Direct Megabit Bypass | Boosted Segmented Grabber Handler Fetcher | ...

Thomas Day - I Don't Wanna Leave Just Yet (Official Video) - LRCHub/0xxeZR0rnhU

A secure and scalable authentication module built with Flask and MySQL, implementing bcrypt-based password hashing and CSRF protection. Designed for easy integration into production-ready applicati...

Proof of concept of Algorithmic Complexity DoS in libc musl 0.8.0-1.2.6 - jensnesten/CVE-2026-6042-PoC

vulcat可用于扫描Web端常见的CVE、CNVD等编号的漏洞，发现漏洞时会返回Payload信息。部分漏洞还支持命令行交互模式，可以持续利用漏洞 - CLincat/vulcat

本项目是一个基于 dnsx 的自动化子域名爆破工具，核心思路是“先过滤泛解析，再进行字典爆破”，用于提高扫描结果准确性与可用性。工具支持单域名与文件批量输入，内置 12w、16w 两套字典并可扩展自定义字典，支持多层级递进爆破，能够在发现新子域名后继续向下挖掘。针对真实网络环境中常见的超时和不稳定情况，项目默认采用容错策略：单点异常自动跳过、任务不中断，同时记录失败项日志便于后续重试。执行过...

Python scripts for efficient SMS automation using HeroSMS webhooks and FastAPI. Solves API polling latency and bypasses anti-fraud systems for mass account registration. - kompui/fastapi-sms-receiver

Black-box web security recon toolkit for AI-driven bug bounty. SSRF, XXE, OIDC, cloud metadata, JS analysis — all JSON output. - catbyte-security/webprobe

Contribute to Yash0030/PROJECT-C2 development by creating an account on GitHub.

A collection of utilities for building extensions using Burp's Montoya API - C0DEbrained/Burp-Montoya-Utilities

基于区块链的网络威胁情报共享平台（Vue + Node + Ethereum）. Contribute to luobo177/security-intel-platform development by creating an account on GitHub.

Contribute to KeulenR01/Remediate-AdobeAcrobat-CVE-2026-34621 development by creating an account on GitHub.

🤖 MoZiSec - AI 驱动的安全测试平台 | API 安全、渗透测试、Web 安全、IAM. Contribute to Acczdy/MoZiSec development by creating an account on GitHub.

基于 Swiper 的响应式色卡联动场景图库，支持缩略图联动与移动端横向色卡切换。. Contribute to coowinit/swiper-color-card-gallery development by creating an account on GitHub.

Enable running modern Windows Defender mpengine.dll on Linux by applying patches and API stubs to bypass signature checks and fix runtime issues. - izvarinth/loadlibrary-patch-kit

Secure Flask-based web application implementing user authentication and session management. Includes password hashing, CSRF protection, and input validation. Designed with a cybersecurity focus, it...