简易的漏洞扫描、资产识别全流程工具. Contribute to mako-zbh/escan development by creating an account on GitHub.

Python library to parse and convert Sigma rules into queries (and whatever else you could imagine) - SigmaHQ/pySigma

This is POC repo for CVE-2026-48208. Contribute to Habuon/CVE-2026-48208 development by creating an account on GitHub.

This is POC repo for CVE-2026-48188. Contribute to Habuon/CVE-2026-48188 development by creating an account on GitHub.

Domain Security Fuzzer v1.0.0 — Automated multi-module web security scanner (headers, secrets, ports, SQLi, XSS, SSRF, XXE, LFI) - noobzhax/domain-fuzzer

Web Security Suite: all‑in‑one web enum & attack testing (70+ vulns: XSS, SQLi, SSRF, etc.) on Kali Linux. Flask UI shows exploitation steps, CVSS, risk score, auto‑updates from GitHub. Aut...

漏洞挖掘. Contribute to zhe99458-byte/cve development by creating an account on GitHub.

Full network/system penetration test of Metasploitable 2 — recon → root compromise (Samba RCE, ingreslock, MySQL/PostgreSQL default creds) → post-exploitation, with reports, per-finding write-ups, ...

Aradbase-Sigma is a repository containing behavior-based Sigma rules developed from Aradbase-YARA malware detection research. - bay-ar4fah/Aradbase-sigma

Full walkthrough of HackTheBox "Silentium" (Medium/Linux). Chains three CVEs: CVE-2025-58434 leaks a Flowise password reset token unauthenticated, enabling account takeover; CVE-2...

Contribute to MrChrisLia/hermes-burpsuite-agent development by creating an account on GitHub.

Change TTL to bypass hotspot limit. Contribute to phuc4real/TTLChange development by creating an account on GitHub.

Burp Suite extension that automatically flags non-standard HTTP headers in proxy traffic, helping you spot custom application headers that may reveal internal infrastructure, debug endpoints, or at...

Contribute to ShashankD210/nuclei-templates development by creating an account on GitHub.

Threat Intel IoCs + bits and pieces of dark matter. Published by Gen Threat Labs. - gendigitalinc/ioc

entest RuleGen is a local Python tool that converts pentest reports to Markdown and generates reviewable Semgrep rules and Nuclei templates from findings that include code snippets, execution trace...

Contribute to ShashankD210/nuclei-template development by creating an account on GitHub.

Burp extension for HTTP request smuggling (PortSwigger base + Desync Agent fork) - patrick-projects/http-request-smuggler

PortSwigger Web Security Academy lab notes: SQL injection, reflected XSS, authentication bypass via timing. - dhxnnn/portswigger-labs

better-sqlcipher (Threema) loadExtension() RCE. Full system compromise via arbitrary native code loading. Confirmed on v12.10.0 (latest). CWE-427. CVSS 9.8. - jabir-dev/CVE-2026-BetterSQLCipher-RCE