Mass exploitation tool for CVE-2026-8206 – Unauthenticated Privilege Escalation via 'handle_forgot_password' in Kirki WordPress plugin (≤6.0.6). - Jenderal92/CVE-2026-8206

模拟练习渗透测试靶场（简单版）. Contribute to AUDGO/bachangjr development by creating an account on GitHub.

TechCorp VPN 钓鱼页面. Contribute to asl040924/techcorp-phishing development by creating an account on GitHub.

A modular C++17 framework for static and simulated dynamic malware analysis. Computes file hashes, parses PE headers, extracts strings, calculates entropy, matches YARA-like rules, predicts runtime...

Custom Nuclei YAML templates built from real VAPT engagements | IDOR, Business Logic, XSS, Missing Headers | OWASP Top 10 mapped - krishanumishra778/nuclei-template-library

dependabot grouped-submodule update test. Contribute to mr-benty/dbot-rce-poc development by creating an account on GitHub.

CANARY is a research prototype that collects Jenkins security advisories and produces an explainable baseline risk score for plugins. - timmybx/canary

Nuclei is an open source vulnerability scanner from ProjectDiscovery that uses YAML-based templates to find security issues in APIs, web apps, and infrastructure. It supports multiple protocols (HT...

Detecting malware in various types of files based on YARA Rules - yogithaaah/Malware-Detector

CVE-2026-23631 (DarkReplica) Redis Exploit. Contribute to yoyosh/DarkReplica development by creating an account on GitHub.

DVWA渗透测试报告（SQL注入/XSS/CSRF/文件上传/命令注入）. Contribute to see-you-Friday/dvwa-pentest-reports development by creating an account on GitHub.

aimy-skill 是一个轻量级、可嵌入 AI Agent 的渗透测试辅助技能，专为授权环境下的自动化信息收集和基础漏洞探测设计。它可以被 AI 助手（如 AutoGPT、LangChain 应用）调用，也可以独立命令行运行。 - yangdada863/aimy-sikll

AI-powered Burp Suite plugin for business logic vulnerability auditing — 基于 AI 的业务逻辑漏洞审计 Burp 插件 - jiushangli/Panoptes

Automating the exploitation of CVE-2026-7299 - Stored XSS via Database Table/Column Names in SQL Autocomplete within Appsmith =>1.99. Initial discovery 30/03/26 - Stuub/Appsmith-1.98-Stored-...

A Burp Suite Extension + React Vite Dashboard for real-time web vulnerability detection - Nidhig2006/burp-vuln-scanner

A zero-dependency, high-performance distributed network throughput engine built in Node.js. It bypasses disk I/O and V8 garbage collection to measure bare-metal link saturation across secured edge ...

Real-time WAF and intrusion detection system (IDS) in pure Python — no external frameworks. Features: XSS/SQLi regex detection with double-decode bypass prevention, sliding-window DoS and brute for...

Contribute to uradhere05/SigmaWarehouseGame development by creating an account on GitHub.

A modified fork of the Sliver C2 framework. Contribute to eugenewyq1/Leonidas-C2-framework development by creating an account on GitHub.

EzObserver 旨在赋能服务器管理员，有效打击利用漏洞或作弊手段破坏游戏平衡的行为，确保每一位玩家都能在一个公正、健康且充满乐趣的环境中畅玩。 - Kush-ShuL/EzObserver

Reproducible Docker lab for CVE-2024-21182 — Oracle WebLogic T3/IIOP OpaqueReference JNDI injection → unauthenticated RCE (CVE-2023-21839 patch-bypass family). One-command validate.sh. - dinosn/CVE...