A collection of PortSwigger Web Security Academy Cross-Site Scripting (XSS) labs solved using Burp Suite and practical web exploitation techniques. Includes reflected, stored, and DOM-based XSS wri...

The pattern matching swiss knife. Contribute to VirusTotal/yara development by creating an account on GitHub.

Wenle Rust Editionis a Rust-based Windows antivirus system with real-time monitoring, YARA scanning, memory analysis and file integrity checking. This project is open source and welcomes reference,...

nuclei本地POC漏洞管理工具，MAC、Windows多端支持. Contribute to InKu0721/SerenNP-manger development by creating an account on GitHub.

简易的漏洞扫描、资产识别全流程工具. Contribute to mako-zbh/escan development by creating an account on GitHub.

Python library to parse and convert Sigma rules into queries (and whatever else you could imagine) - SigmaHQ/pySigma

This is POC repo for CVE-2026-48208. Contribute to Habuon/CVE-2026-48208 development by creating an account on GitHub.

This is POC repo for CVE-2026-48188. Contribute to Habuon/CVE-2026-48188 development by creating an account on GitHub.

Domain Security Fuzzer v1.0.0 — Automated multi-module web security scanner (headers, secrets, ports, SQLi, XSS, SSRF, XXE, LFI) - noobzhax/domain-fuzzer

Web Security Suite: all‑in‑one web enum & attack testing (70+ vulns: XSS, SQLi, SSRF, etc.) on Kali Linux. Flask UI shows exploitation steps, CVSS, risk score, auto‑updates from GitHub. Aut...

漏洞挖掘. Contribute to zhe99458-byte/cve development by creating an account on GitHub.

Full network/system penetration test of Metasploitable 2 — recon → root compromise (Samba RCE, ingreslock, MySQL/PostgreSQL default creds) → post-exploitation, with reports, per-finding write-ups, ...

Aradbase-Sigma is a repository containing behavior-based Sigma rules developed from Aradbase-YARA malware detection research. - bay-ar4fah/Aradbase-sigma

Full walkthrough of HackTheBox "Silentium" (Medium/Linux). Chains three CVEs: CVE-2025-58434 leaks a Flowise password reset token unauthenticated, enabling account takeover; CVE-2...

Contribute to MrChrisLia/hermes-burpsuite-agent development by creating an account on GitHub.

Change TTL to bypass hotspot limit. Contribute to phuc4real/TTLChange development by creating an account on GitHub.

Burp Suite extension that automatically flags non-standard HTTP headers in proxy traffic, helping you spot custom application headers that may reveal internal infrastructure, debug endpoints, or at...

Contribute to ShashankD210/nuclei-templates development by creating an account on GitHub.

Threat Intel IoCs + bits and pieces of dark matter. Published by Gen Threat Labs. - gendigitalinc/ioc

entest RuleGen is a local Python tool that converts pentest reports to Markdown and generates reviewable Semgrep rules and Nuclei templates from findings that include code snippets, execution trace...

Contribute to ShashankD210/nuclei-template development by creating an account on GitHub.