Practical offensive security notes — XSS, SQLi, IDOR, Command Injection and more - hellboy-zero/offensive-security-notes

Get an instant Telegram alert the moment a new CVE is published for software you run (Zabbix, Roundcube, ESXi, ...). Pure-Python, NVD-backed, runs as a service. - RedSideSecurity/CVEAlertor

A tool designed to exploit CVE-2025-54068 and Remote Command Execution if the APP_KEY of the Livewire project is known. - synacktiv/Livepyre

Quantifying relativistic effects of exchanged pions in light nuclei - Moth-0/bachelor

Hands-on malware analysis project covering hashing, strings, PE structure, behavioral analysis and YARA rules - Amalzalu/malware-analysis-challenge

Contribute to byte16384/CVE-2026-49492-PoC development by creating an account on GitHub.

A calibrated 4-stage sequential malware detection pipeline using YARA, MalConv, EMBER, and Nebula - Adinavinojy/T-SLIFER

Professional IP Stresser & Load Testing Toolkit 2026. Legal stress testing scripts, documentation, and guides for testing your own servers and infrastructure. IP Stresser | IP Booter | DDoS...

A full-stack web vulnerability scanner built with Next.js and FastAPI. Performs real-time security checks including port scanning, SSL analysis, HTTP header inspection, SQLi/XSS detection, and WHOI...

Labeled vulnerability-package match pairs used as ground truth to evaluate vulnerability scanners - anchore/vulnerability-match-labels

Contribute to yena0511/HE-C2 development by creating an account on GitHub.

Windows Electron Phase 1 PoC for surgical teaching software: 4-channel USB preview, selective recording, audio capture and local playback index. - ticopapa327-dot/surgical-teaching-phase1-poc

End-to-end DevSecOps pipeline deploying a MERN stack app on AWS EKS with Jenkins, ArgoCD, Terraform, SonarQube, Trivy, and Prometheus/Grafana monitoring. - Sanket006/three-tier-devsecops-eks

🚀 Invision is a fully automated CI/CD-based web application where every code push triggers an end-to-end pipeline using Jenkins, Docker, and AWS, enabling zero-manual deployment to production. - ku...

Comprehensive web application recon & vulnerability enumeration framework. Glues together nuclei/katana/ffuf/nmap and adds first-party checks (SQLi, XSS, request smuggling, JWT, SSRF/SSTI/X...

PoC for CVE-2026-48907 - Joomla! JCE extension < 2.9.99.5 unauthenticated RCE - ywh-jfellus/CVE-2026-48907

WEBSECPY is a Python Flask-based web vulnerability scanner that detects SQL Injection, XSS, security header misconfigurations, and information disclosure issues while generating detailed security r...

A Python-based vulnerability scanner to detect open ports, weak configurations, and generate security reports. - shanmugapriya4112006-cpu/vulnerability-scanner-

🛡️ 面向初创企业 & 个人站长的开源轻量化安全自检 + 防御加固工具 一键扫描端口 · 检测SQL注入/XSS/弱口令 · 生成中文风险报告 · 自动加固Linux/Windows服务器 仅自查自有资产，禁止对外攻击 | Python 3.10+ | 适配器架构可扩展 - Nagi-226/LightShield

LeadPages 2026 Productivity Suite Activation – Lifetime Access Bypass Tool - Vin3116/leadpages-toolkit-extractor