Contribute to LuizHenz/PoC-CVE-2025-55182 development by creating an account on GitHub.

JS Miner Pro is a lightweight, customizable Burp Suite extension designed to find hard-coded secrets, API endpoints, and hidden paths inside JavaScript, JSON, and HTML files. - tobiasGuta/JS-Miner-...

Static and dynamic malware analysis with IOC extraction, persistence analysis, and PCAP-based threat investigation. - jhaaaryan/malware-analysis-threat-investigation

Novel DonutLoader variant — dual-channel custom C2 (HXh payload delivery TCP/8853 + steganographic beacon TCP/7070), 10-host operator cluster on AS138995, Hunt.io Chalubo mislabel documented. YARA,...

指定版本mysql 安全漏洞分析. Contribute to leyoushilei/MySQL-Vulnerability-Risk-Analyzer development by creating an account on GitHub.

Exploitation write-up for PortSwigger Path Traversal lab — Null Byte Bypass (%00). Demonstrates how appending %00 to a filename terminates OS-level string processing, bypassing server-side extensio...

This repo contains custom scripts. Contribute to sambiyal/Portswigger-Burp-Extension development by creating an account on GitHub.

用于自动化检测图片上传功能中的XSS漏洞。通过将上传的文件修改为SVG格式并插入XSS Payload来测试漏洞。 - xiaolu-cmd/SVG-XSS-Upload-Scaner

Crossplane configuration package: crossplane-kubernetes-provider. Kubernetes provider, ProviderConfig, and RBAC. - hops-ops/crossplane-kubernetes-provider

Linux kernel CVE exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment anymore. - bsauce/kernel-exploit-factory

SSRF-safe URL validator that returns pinnable resolved IPs - jonathanong/ssrf-guard

Contribute to sec-dojo-com/cve-poc development by creating an account on GitHub.

Qualys' Burp Extension for WAS. Contribute to QIntegration/burp-extension-for-was development by creating an account on GitHub.

CSRF和SSRF漏洞演示环境，用于Web安全教学. Contribute to Guojin0826/csrf-ssrf-lab development by creating an account on GitHub.

A threat intelligence-based website that provides malware detection and analysis services, offering YARA rules for identified malware along with a reporting portal for malware researchers. - 0xZain...

基于 C++ 高性能 Web 框架 drogon 开发的云存储网盘系统，采用前后端分离架构。后端使用 drogon 构建 RESTful API 服务，MySQL 存储用户与文件元数据，Redis 缓存热点数据与用户会话，Nginx 实现反向代理与负载均衡；前端基于 Vue3 搭建交互界面。支持用户注册登录、文件上传/下载/分享、目录管理等核心功能，通过异步 I/O 与多线程模型保障高并发场...

Support-engineer diagnostic collector for FeatureForm-on-Kubernetes (and any K8s workload). One stdlib-only Python script, --mode auto/ff/k8s. Read-only RBAC, no Secrets API access, two-pass redact...

🤖 Control Kubernetes with ease using a secure Telegram bot that leverages RBAC permissions, ensuring safe cluster operations for your team. - cropy128900/kbot

Mitigate SSRF and DNS rebinding in reqwest by filtering DNS lookups, redirect targets, and URL literals through an IP / host ACL - walf443/reqwest-ssrf-guard

Security scanner for AI agent skills — 38 modules detecting credential theft, supply-chain attacks, prompt injection, and runtime abuse across any skill bundle. - JXXR1/skill-scanner

RootHawkX 是一个 Linux 本地安全测试终端工具,本项目基于RootHawk进行修改，集成了更多漏洞利用模块。 - DeEpinGh0st/RootHawkX