PoC and writeup for CVE-2026-46394 — OS command injection in HAXcms Git.php (CWE-78). Authorized security research only. - shreyas-challa/CVE-2026-46394-haxcms-git-command-injection

OpenVScan is a web-based vulnerability scanner that integrates open-source tools with AI to deliver smarter, faster and more reliable pre-production security testing. - buddhsen-tripathi/openvscan

A vulnerability scanner for container images and filesystems - anchore/grype

🛡️ 自动化渗透测试调度平台 — Claude Code 生态. AI 驱动 / 多目标并发 / 动态 skill 加载 / 实时观测 - txluck/secweb

Caderno Temático NotebookLM: análise de vulnerabilidades SQL Injection (CVE-2024-42327, CVE-2026-23921) no Zabbix, com engenharia de prompts, cadeia de ataque até RCE e miniguia de hardening - Rich...

Web vulnerability scanner written in Python3. Contribute to wapiti-scanner/wapiti development by creating an account on GitHub.

Red Teaming C2 Framework | Features: WebSocket C2, Remote Desktop, Webcam, Keylogger, Credential Harvester, Ransomware Sim, Remote Shell, File Ops, HID Control, Audio Capture, Persistence (10+ meth...

基于 FastAPI 的漏洞管理与 AI 分析平台，shadcn/ui 前端. Contribute to CZHHH-CC/vul-manager development by creating an account on GitHub.

Modular Active Directory vulnerability scanner — LDAP/LDAPS/SMB, 36 security checks, HTML report with risk score - dehobbs/ADScan

Vulnerability scanner written in Go which uses the data provided by https://osv.dev - google/osv-scanner

Contribute to fevar54/CVE-2024-21182---Oracle-WebLogic-Server-JNDI-Injection-RCE development by creating an account on GitHub.

SSRF PoC for bug bounty. Contribute to FancybearIN/ssrf-poc-1781038961 development by creating an account on GitHub.

Decentralized C2 beaconing detection framework for edge router deployment, featuring integration with SIEM and alerting system. - litemars/BeaconDetectionSystem

CVE-2026-45247 - Mirasvit Full Page Cache Warmer for Magento 2 Unauthenticated PHP Object Injection -> Remote Code Execution - fevar54/PoC-Funcional---CVE-2026-45247-Mirasvit-Full-Page-Cache...

Vulnerable Flask web app for learning web security — SQLi, XSS, IDOR, broken auth, file upload. Each vuln has a vulnerable and fixed version with writeup. - s4mm1t/web-vuln-lab

Async web vulnerability scanner with confidence scoring, proof-based verification and replay system - Berkayy123-h/web-scanner

Contribute to AshrafiPouya/preyground development by creating an account on GitHub.

vulntriage is a standalone CLI that converts noisy vulnerability scan output (Nuclei/HTTPX JSONL) into deduplicated, prioritized, report-ready findings (findings.md + findings.json) for authorized ...

A comprehensive collection of YARA rules and analysis tools for malware detection and threat intelligence - DeCyberGuardian/malware-analysis

Production-ready detection content for SOC operations. Sigma rules, Splunk SPL, KQL, YARA signatures, and ATT&CK-mapped detection strategies. - Jaysolex/Detection-Content

Position-independent x64 Windows shellcode that dynamically resolves WinExec via PEB walking and export hashing, with a loader-patched ExitThread epilogue for clean thread termination. Built for Wh...