PHP 安全加固参考项目。将原始漏洞靶场vulnlab的 OWASP Top 10 漏洞逐一修复，展示 SQL注入、XSS、CSRF、SSRF、XXE、越权、文件上传等常见 Web 漏洞的正确防御方案，适合安全编码入门与代码审计对比学习。 - SuperDemon921/vulnlab_fix

Collection of CVEs that I have discovered and their corresponding exploits - hacefresko/CVEs

A collection of PortSwigger Web Security Academy Cross-Site Scripting (XSS) labs solved using Burp Suite and practical web exploitation techniques. Includes reflected, stored, and DOM-based XSS wri...

The pattern matching swiss knife. Contribute to VirusTotal/yara development by creating an account on GitHub.

Wenle Rust Editionis a Rust-based Windows antivirus system with real-time monitoring, YARA scanning, memory analysis and file integrity checking. This project is open source and welcomes reference,...

nuclei本地POC漏洞管理工具，MAC、Windows多端支持. Contribute to InKu0721/SerenNP-manger development by creating an account on GitHub.

简易的漏洞扫描、资产识别全流程工具. Contribute to mako-zbh/escan development by creating an account on GitHub.

Python library to parse and convert Sigma rules into queries (and whatever else you could imagine) - SigmaHQ/pySigma

This is POC repo for CVE-2026-48208. Contribute to Habuon/CVE-2026-48208 development by creating an account on GitHub.

This is POC repo for CVE-2026-48188. Contribute to Habuon/CVE-2026-48188 development by creating an account on GitHub.

Domain Security Fuzzer v1.0.0 — Automated multi-module web security scanner (headers, secrets, ports, SQLi, XSS, SSRF, XXE, LFI) - noobzhax/domain-fuzzer

Web Security Suite: all‑in‑one web enum & attack testing (70+ vulns: XSS, SQLi, SSRF, etc.) on Kali Linux. Flask UI shows exploitation steps, CVSS, risk score, auto‑updates from GitHub. Aut...

漏洞挖掘. Contribute to zhe99458-byte/cve development by creating an account on GitHub.

Full network/system penetration test of Metasploitable 2 — recon → root compromise (Samba RCE, ingreslock, MySQL/PostgreSQL default creds) → post-exploitation, with reports, per-finding write-ups, ...

Aradbase-Sigma is a repository containing behavior-based Sigma rules developed from Aradbase-YARA malware detection research. - bay-ar4fah/Aradbase-sigma

Full walkthrough of HackTheBox "Silentium" (Medium/Linux). Chains three CVEs: CVE-2025-58434 leaks a Flowise password reset token unauthenticated, enabling account takeover; CVE-2...

Contribute to MrChrisLia/hermes-burpsuite-agent development by creating an account on GitHub.

Change TTL to bypass hotspot limit. Contribute to phuc4real/TTLChange development by creating an account on GitHub.

Burp Suite extension that automatically flags non-standard HTTP headers in proxy traffic, helping you spot custom application headers that may reveal internal infrastructure, debug endpoints, or at...

Contribute to ShashankD210/nuclei-templates development by creating an account on GitHub.