专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, designed for CTF - Marven11/Fenjing

Learn Windows malware development and defense in Rust with 15 stages covering offense, detection, and AV testing - corabellanonextant92/goodboy-framework

PoC (Proof of concept) of Path traversal + RCE in Apache HTTP Server 2.4.49 - wvverez/CVE-2021-41773-PoC

Honeypot farm emulating vulnerable services based on real CVE PoCs + Nuclei templates — catches attackers scanning for known CVEs - ichigo1vs/cve-honeypot

Generate nuclei templates from curl commands + HTTP responses. No AI, no API keys. - SeekAndExploit/nuclei-gen

106 team-reviewed Sigma rules detecting the full Active Directory attack chain: recon, coercion, credential access, lateral movement, persistence and trust abuse. Mapped to MITRE ATT&CK and...

Dragnet detection rules — sigma format. Contribute to dragnet-dev/haul-rules-sigma development by creating an account on GitHub.

🛡️ Static security scanner for Ansible playbooks. 1,090+ rules across 30+ categories covering malicious code, supply-chain risk, IaC misconfiguration, secrets, RCE, and lateral movement. Outputs SA...

A modular suite for large-scale threat hunting, stealth recon, and exploit discovery. - jakeloai/BlackSecurity

Native Go engine for automated aggregation, sanitization, and JSON-exporting of global CVE exploit Proof-of-Concepts. Continuously mirrored from the wild - yadavnikhil17102004/CVE_Map_hehe

xây dựng công cụ tự động tạo chữ ký yara từ các đặc trừng chung 1 họ mã độc - vanity1412/Automated-YARA-Rule-Generation-Tool

每日自动收集全网可用 Nuclei POC . Contribute to lianqingsec/NucleiPocGather development by creating an account on GitHub.

Automated CVE exploit scanners and Nuclei templates. Updated every 6h. - PrettyFox0/cve-arsenal

Visual no-code web scraper for AI agents. Point, click, extract — or describe in plain English. Anti-bot bypass, clean JSON, REST + Python/TS SDKs + MCP. - Rusheesonu/Stealth-Scraper

CVE-2024-4367–PDF.js-xss. Contribute to xiaoqiesec0x1/CVE-2024-4367-PDF.js-xss development by creating an account on GitHub.

ML-driven CVE risk prioritization with end-to-end MLSecOps pipeline - daniyal-hussain01/attack-surface-ml

POC for CVE-2026-30950 which allows session hijacking in AutoGpt - ZeroPathAI/autogpt-CVE-2026-30950-poc

Burp Suite extension for advanced API security scanning (cleanup fork) - liam-portswigger/burp-api-scanner

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware. - nomi-sec/PoC-in-GitHub

XDR-SOP-SKILL：供应链投毒攻击，首个AI标准化应急处置技能. Contribute to seccmd/xdr-sop-skill development by creating an account on GitHub.

Apifox 供应链攻击排查工具, 检测已知远程代码执行 / 数据回传风险. Contribute to daxiong888/apifox_security_check development by creating an account on GitHub.