API Auth & Validation Tester is a Burp Suite extension built in Java with the Montoya API. It helps security testers quickly triage API authentication enforcement, input validation behavior...

CVE-2026-31431 - Linux Kernel Page Cache Vulnerability - Lutfifakee-Project/CVE-2026-31431

基于 Playwright 构建的现代化网页截图工具，具有高稳定性、高并发、反检测能力和自动重试机制，可以在渗透测试中提供一定的帮助。 - GoodMorning-000/Web-screenshot-tool

针对于红队攻击思维做出的red team模式，可在单对话使用（可自行适配其他AI）. Contribute to chAng-L19/codex-redteam-optin-mode development by creating an account on GitHub.

分为两大模块，api 是高校脱敏接口文档集合，lab 是基于这些接口复刻的校园系统安全靶场，内置未授权访问、水平 / 垂直越权、参数篡改等典型漏洞，支持 Docker 一键部署，是接口渗透测试与安全实训的实战平台。 - yexinyii/campus-api-docs

新一代Webshell管理器，兼容蚁剑与冰蝎的PHP webshell. Contribute to Marven11/EtherGhost development by creating an account on GitHub.

CSRF is an attack where a victim’s browser is tricked into making an authenticated request to a trusted application without their consent. - siran9091/CSRF

A stdio bridge that lets Codex use Burp Suite MCP tools - AA8j/codex-burp-mcp-bridge

Contribute to watdahecklol32/roblox-2016-rccservice-unauth-rce-vulnerability development by creating an account on GitHub.

Local pacman repo that tracks the latest anomalyco/opencode desktop releases, bypassing the AUR which lags behind. - BrentJMaxwell/opencode-desktop-latest

SSTI contact form to rce. Contribute to shootcannon/CVE-2026-4257 development by creating an account on GitHub.

用《毛选》管理AI Agent——政委监督/红蓝对抗/群众路线/Token军事化。解决多Agent糊弄、幻觉累积、Token浪费。 - kcxsb/ai-maoist-org

AI-driven Java Code Review Agent based on LangChain。支持 CLI 与 GitLab MR Webhook 触发，自动分析代码变更并输出安全漏洞、编码规范、潜在 Bug 审查报告，结果回写为 GitLab MR 评论，内置 Flask 仪表盘查看历史记录 - Anies-Gonzelaz/code-review-aiagent

[POC] A robust high-performance relay server designed to bypass network restrictions using Xray (VLESS Reality) and FRP Tunneling - vincentng295/relay_bypass_server

csrf poc. Contribute to eye-patch0/csrf_poc development by creating an account on GitHub.

Contribute to Ar7pvt/c2 development by creating an account on GitHub.

A fully playable Snake game running inside a Burp Suite. - VermaOps/snake-burp

🤖 AI驱动的Burp Suite安全扫描插件，专注于检测高危Web漏洞. Contribute to AnonAnon3376/AnonScanner development by creating an account on GitHub.

🥒 Educational PyTorch pickle deserialization RCE demo showing how malicious .pt model files can execute arbitrary code during unsafe loading with torch.load(). - giriaryan694-a11y/pickle-ride

Production-inspired Flask authentication system demonstrating secure backend engineering practices including session authentication, password recovery, modular architecture, rate limiting, and CSRF...

Contribute to kim-daehyun/s2n-agent-xss-ai development by creating an account on GitHub.