Paradox 是一个面向Web 渗透与代码审计的训练靶场，模拟一套企业管理系统（用户/员工/客户/公告/文件/消息等业务模块），并在其中有意植入多类常见安全缺陷。 与多数偏重"注入类"漏洞的靶场不同，Paradox 的核心重点是逻辑漏洞：这类问题不依赖特殊字符或畸形负载，而是利用业务规则、状态流转、信任边界上的设计缺陷，往往是真实 SRC / 攻防中&...

HackIT Penetrasi Testing - Framework Ultimate Hexa-Engine Security Suite (C/C++/Rust/Go/Py/Rb/Lua). High-performance Stealth Scanning, SQLi/XSS Auditing, & Network Intelligence - dextryayer...

v2. Contribute to seiertech/Commander_C2 development by creating an account on GitHub.

Крафтовые яры на основании анализов семплов малвари. - Dr-D25/yara_rules

Basic vulnerability scanner for port scanning and security assessment. - ranjanayuss/Mini-Vulnerability-Scanner

Contribute to spython031987/Crypto-Exchange-Data-Connector-App development by creating an account on GitHub.

OpenGraph/Twitter-Card link preview cards for Flarum 2.0 — SSRF-hardened, queue-backed, zero-CLS, with hover previews and per-card pin/dismiss. - ekumanov/flarum-ext-link-preview

Vendor-neutral Sigma detection rules across 9 MITRE ATT&CK tactics — credential dumping, encoded PowerShell, persistence, lateral movement, and more. Structurally validated in CI with an au...

A classy task Management built with React and Typescript, Focusing on Clean Architecture and Solid Principles - mohabmohamed44/Task-Management

Generic exploit for SSTI vulnerabilities in Flask/Jinja2 applications that process user-uploaded images with OCR. - gugeldot/late-htb-script

CVE-2026-23744 - Versions 1.4.2 and earlier of MCPJam inspector are vulnerable to remote code execution (RCE). Because the tool listens on 0.0.0.0 by default, an attacker can trigger the installati...

基于 ESP32-S3 双板架构的物联网安全防护系统。实时监控、AI 决策、蜜罐诱捕、自适应防御。. Contribute to MrZhao-hub666/WifiWarden development by creating an account on GitHub.

Contribute to webshellseo8/CVE-2026-53787-POC- development by creating an account on GitHub.

Automated blind SSRF scanner with native PingBack.sh OAST correlation, persistent callbacks and exact injection tracking. - pingback-sh/pbscan

**Block SSRF attacks in one line. Production-ready middleware for Express, Fastify, Hono, and any Node.js application.** - Brah-Timo/ssrf-guard

Contribute to helshafaie45/Sliver development by creating an account on GitHub.

Open source engine to detect malware for security researchers with Yara support - secana/open-detect

yara-x in node.js. Contribute to cawalch/node-yara-x development by creating an account on GitHub.

Contribute to twhalley/payments-platform-poc development by creating an account on GitHub.

Vulnerability Scanner is a Java application designed to detect and analyze potential security vulnerabilities in systems, applications, or files. The project performs automated scanning, identifies...

Pizzafy Ecommerce System 1.0 - authenticated arbitrary file upload in save_settings leading to RCE (CWE-434). Security research report + PoC. - leidyardila981-creator/Pizzafy-Ecommerce-1.0-save_set...