Web vulnerability scanner CLI — OWASP Top 10 detection - SantiagoP0815/vuln-scanner

跨平台进程内存关键字扫描工具，用于应急响应 / DFIR：在进程内存中搜索文本或 HEX 字节（自动多编码 UTF-8 / UTF-16LE / GBK），快速定位发起可疑连接、执行可疑命令的进程。提供 GUI 与纯静态 CLI，支持 Windows 与 Linux（amd64 / arm64，含国产化系统）。 - cnevil/MemScan

A vulnerability scanner and exploitation framework targeting Spring, GraphQL, and React Server Components (RSC) stacks. Features dynamic WAF evasion, passive/active auditing, Out-of-Band (OOB) veri...

"AI-Powered Vulnerability Scanner + Learning Assistant" Features: Scan a website Find common security issues Explain them in simple language Suggest fixes Generate a professional...

YARA detection rules for malware detection and threat hunting - leonardosmoutinho/yara-detection-rules

CTI & detection package for an Iranian-nexus hands-on-keyboard intrusion against Omani government networks — confirmed infrastructure attribution, Sigma/YARA/Suricata/KQL detections, IR pla...

【Java计算机毕业设计分享】基于Python的漏洞挖掘系统，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - jleebull/nBAmEvtTQC

A clean, scalable, and fully styled Mermaid.js template to build interactive family trees. Features a modern layout organized by generations, branches, and sibling nuclei using nested subgraphs and...

Automated SSRF detection tool — bypass techniques, cloud metadata, OOB confirmation, JSON evidence output - Mostafa-Maklad/SSRF_Hunter

POC to shell execution when importing agent. Contribute to KY64/letta-af-exploit-poc development by creating an account on GitHub.

Zig x64 Windows shellcode loader. Fresh ntdll, indirect syscalls, AMSI/ETW patch. 影に潜む。 - Yenn503/Kage

OneDragon 安全圈一条龙服务，全自动化挖洞，助力挖SRC的赏金猎人白帽子，一键实现子域名扫描，全端口扫描，目录扫描，漏洞扫描。 - possib1e/OneDragon

nix flake combining yara + signature-base. Contribute to karpfediem/yara-sigs development by creating an account on GitHub.

Swagger-ui 反射XSS POC. Contribute to Lq0ne/Swagger-ui-XSS development by creating an account on GitHub.

A stealth-focused Python C2 framework leveraging RPYC and memory-only module loading to provide a completely fileless post-exploitation experience on Windows and Linux. - letho1608/pupy_nextgent

Writeup e exploit da CTF Phantom — cadeia method bypass → SSRF/LFI → PHAR deserialization → RCE. - jvncodez/PHANTOM_CTF_HACKINGCLUB_BY_BSIDESRECIFE

Convert anything, from anywhere — universal file conversion platform (Node.js + FFmpeg/ImageMagick/LibreOffice/Pandoc...). SSRF-protected URL import, 9 categories. - simonpierreboucher02/all-converter

shellcode loader with XOR encryption and EDR evasion techniques. for security research and authorized testing only. - achnouri/Shellcode-EDR-Evasion-Loader

Defensive malware analysis sandbox using Python, YARA, PE analysis, hashing, entropy checks, VM isolation, and HTML/JSON reporting. - Suspecting/MalwareScope