本项目面向文件上传安全场景，构建了一套集**漏洞靶场、攻防知识库、轻量大模型辅助分析、上传安全网关、评测脚本与前端仪表盘**于一体的实验原型。系统用于研究不同文件上传漏洞场景下的攻击样本组织、知识表示、规则生成、网关检测与结果分析过程，重点验证“攻击卡—攻击样本卡—防御卡—上传网关—评测结果—仪表盘”这一闭环设计。 - Taurdow/Upload-sec-lab

Contribute to roberttkach/ncapd development by creating an account on GitHub.

Contribute to Scaler-Cybersecurity1/csrf-clickjacking-lab development by creating an account on GitHub.

Contribute to marklangan/MarkLangan_C22470414_FYP development by creating an account on GitHub.

A comprehensive Burp Suite Professional extension providing MCP server functionality for AI-powered security testing with AI Agents - fwaeytens/burp-mcp-bridge

Offensive web scanner: crawling, XSS, SQLi, headers and WAF bypass - theoffsecgirl/webxray

自研提示词模板，用户自选api，输入api-url以及api-key就能够生成钓鱼邮件. Contribute to wcjc319/- development by creating an account on GitHub.

PoC for Unauthenticated RCE in FortiSandbox via CVE-2026-39808 - samu-delucas/CVE-2026-39808

Burp Extensions Api. Contribute to PortSwigger/burp-extensions-montoya-api development by creating an account on GitHub.

Analyze NTLM attack surface and identify relay, poisoning, and coercion vectors in AD. - 0xnear-13/ntlm_audit.py

A sophisticated, cross-platform exploit generator for **CVE-2026-34621** – a critical prototype pollution vulnerability in Adobe Acrobat and Reader that leads to sandbox escape and arbitrary code e...

Contribute to gigachadusers/cve-2026-20127 development by creating an account on GitHub.

Velocmd is a high-performance system launcher and file indexer designed to bring a unified, instant command palette to Windows. Powered by a Rust backend and a lightweight Tauri frontend, it bypass...

High-performance PCAP analysis with zero false-positives, smart caching, and structured reporting.高性能 PCAP 分析平台，零误报威胁检测，智能情报缓存，结构化报告输出。 - Mal-Suen/NetflowSight

Mark external, absolute links with necessary attributes - binyamin/markdown-it-external-anchor

Contribute to mpgopala/c2pa-sample-app development by creating an account on GitHub.

Binary auditing and automatic RCE generator. Contribute to VABISMO/binsmasher development by creating an account on GitHub.

BlackBounty is a high-performance, automated reconnaissance and vulnerability scanning pipeline designed for large-scale bug hunting. It leverages a dynamic proxy-rotation system to bypass WAFs and...

🛡 Advanced Web Vulnerability Scanner for Bug Bounty & Penetration Testing. 23 modules: XSS, SQLi, SSRF, Command Injection, JWT, CORS, Subdomain Takeover, GraphQL & more. Single file...

Contribute to amit637186/csrf-demo development by creating an account on GitHub.

A proactive security tool that uses the Isolation Forest algorithm to detect malicious web traffic. By analyzing HTTP logs for unusual URL lengths, status codes, and SQLi signatures, it isolates th...