Cybersecurity Malware Detection System built with Python & Flask featuring YARA scanning, PE analysis, entropy detection, VirusTotal integration, AI malware classification, analytics dashbo...

PDF Malware Analysis project. Using Kali Linux analyzed suspicious PDF files with pdfid, peepdf, and YARA rules, and verified results with VirusTotal. - sakshi4518/pdf-malware-analysis

token exchange as a service. Contribute to nais/texas development by creating an account on GitHub.

Gather and update all available and newest CVEs with their PoC. - trickest/cve

Firefox+Burp suite extension for marking requests based on the originating container. - Stijn-K/Postmark

Java Web 全链路自动化安全审计系统。基于 Claude Code Agent Teams，一行命令完成路由识别→调用链追踪→8种漏洞检测→利用链编排→审计报告。覆盖 SQL 注入/反序列化/SSRF/表达式注入/XXE/文件上传/文件读取/鉴权绕过 + OSV.dev 3000+ CVE。支持快速模式、增量审计、CFR 反编译。 - Dest1ny-Sec/Des-jav...

AI自动化信息收集一把梭 — 22 个 Collector 流水线化扫描 + Claude AI 智能评分引擎，输出按攻击优先级排序的资产列表 - Dest1ny-Sec/Desinter_scan

Automated AD lab provisioning (Vagrant), BloodHound automation, Kerberos attacks, credential attacks, ACL abuse, lateral movement, privilege escalation, detection mapping with Sysmon/Sigma rules, a...

A multi-layered Malware Sandbox featuring dynamic DNS/HTTP sinkholing (FakeNet), YARA-based static analysis, and real-time behavioral monitoring in isolated Linux environments. - Jaylen-Watkins/San...

Contribute to HisMax/ssrf-poc development by creating an account on GitHub.

CVE Sentinel watches the horizon so you don't have to. It aggregates newly published vulnerabilities from NVD, OSV, and GitHub Advisory, cross references them against your real world depend...

MSBuild XML-based shellcode/assembly loader for OffSec OSEP. LOLBin execution via MSBuild.exe with AMSI/ETW bypass, AES-256-CBC encryption, thread context manipulation, and in-memory .NET assembly ...

Yarek is an CLI tool to manage, build, and test a YARA-X rule library - W3ndige/Yarek

FastMCP server for Midjourney image generation via PiAPI, with daily USD cost cap, per-call audit, and SSRF-safe image URL inputs. 11 tools. - adelaidasofia/midjourney-mcp

A Burp Suite extension that passively captures every UUID - phrantom/uuid-capture

Oracle REST Data Services (ORDS) Unauthenticated RCE (CVE-2026-46840) - fangbarristerbar/CVE-2026-46840-ORDS-RCE

[Work In Progress] Source-map semantic-pattern analyzer for stored XSS - b2d3/StoXSS

Internship task: DCSync & DCShadow detection with Sigma rules - LiDit3/AD-Attack-Research

Ultimate SSRF Arsenal is a powerful, dynamic, and fully automated SSRF (Server-Side Request Forgery) testing framework built with Python and Playwright. It features intelligent endpoint discovery, ...

FreePBX Unauthenticated UCP Access via Hard-Coded Credentials - portbuster1337/CVE-2026-46376

Burp Theme Lab is a clean, simple, and robust Burp Suite extension that allows you to change Burp Suite's Look and Feel directly from inside a custom "Theme Lab" tab using...