Container escape scenario modeler — enumerate container security posture and model realistic escape paths - Su1ph3r/Cepheus

to understand jenkins pipeline. Contribute to animeshsahoo5/nodeproject development by creating an account on GitHub.

Fiches XSS réfléchie, SSTI, SQLi, Command Injection — labs autorisés - Remy-Miquel/web-vulnerabilities-labs

This is AI-powered extension for Burp Suite that integrates LLMs through Ollama to enhance application security testing and penetration testing workflows.This assists in identifying web and API sec...

验证漏洞报告skill，用于基于单个漏洞报告材料文件复核PoC，在本地或隔离环境中重新复现、采集新证据，并生成结构化 Markdown 验证报告 - kn1l/poc-checker

Cybersecurity Malware Detection System built with Python & Flask featuring YARA scanning, PE analysis, entropy detection, VirusTotal integration, AI malware classification, analytics dashbo...

PDF Malware Analysis project. Using Kali Linux analyzed suspicious PDF files with pdfid, peepdf, and YARA rules, and verified results with VirusTotal. - sakshi4518/pdf-malware-analysis

token exchange as a service. Contribute to nais/texas development by creating an account on GitHub.

Gather and update all available and newest CVEs with their PoC. - trickest/cve

Firefox+Burp suite extension for marking requests based on the originating container. - Stijn-K/Postmark

Java Web 全链路自动化安全审计系统。基于 Claude Code Agent Teams，一行命令完成路由识别→调用链追踪→8种漏洞检测→利用链编排→审计报告。覆盖 SQL 注入/反序列化/SSRF/表达式注入/XXE/文件上传/文件读取/鉴权绕过 + OSV.dev 3000+ CVE。支持快速模式、增量审计、CFR 反编译。 - Dest1ny-Sec/Des-jav...

AI自动化信息收集一把梭 — 22 个 Collector 流水线化扫描 + Claude AI 智能评分引擎，输出按攻击优先级排序的资产列表 - Dest1ny-Sec/Desinter_scan

Automated AD lab provisioning (Vagrant), BloodHound automation, Kerberos attacks, credential attacks, ACL abuse, lateral movement, privilege escalation, detection mapping with Sysmon/Sigma rules, a...

A multi-layered Malware Sandbox featuring dynamic DNS/HTTP sinkholing (FakeNet), YARA-based static analysis, and real-time behavioral monitoring in isolated Linux environments. - Jaylen-Watkins/San...

Contribute to HisMax/ssrf-poc development by creating an account on GitHub.

CVE Sentinel watches the horizon so you don't have to. It aggregates newly published vulnerabilities from NVD, OSV, and GitHub Advisory, cross references them against your real world depend...

MSBuild XML-based shellcode/assembly loader for OffSec OSEP. LOLBin execution via MSBuild.exe with AMSI/ETW bypass, AES-256-CBC encryption, thread context manipulation, and in-memory .NET assembly ...

Yarek is an CLI tool to manage, build, and test a YARA-X rule library - W3ndige/Yarek

FastMCP server for Midjourney image generation via PiAPI, with daily USD cost cap, per-call audit, and SSRF-safe image URL inputs. 11 tools. - adelaidasofia/midjourney-mcp

A Burp Suite extension that passively captures every UUID - phrantom/uuid-capture