跨平台进程内存关键字扫描工具，用于应急响应 / DFIR：在进程内存中搜索文本或 HEX 字节（自动多编码 UTF-8 / UTF-16LE / GBK），快速定位发起可疑连接、执行可疑命令的进程。提供 GUI 与纯静态 CLI，支持 Windows 与 Linux（amd64 / arm64，含国产化系统）。 - RynezzZ/MemScan

一个用于 AI 辅助漏洞挖掘的安全约束技能。它限制高危操作、过滤噪音发现，并要求基于可复现证据输出确认漏洞。 - Yliken/safeskills

nuclei templates that extract leaked credential values for geiger triage - puck-security/geiger-nuclei-templates

A plugin for Burp Suite Pro that uses the GraphQL schema to begin Active Scanning the entire endpoint. - FWDSEC/burp-auto-gql

AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services. - zaidanr/AuthMatrix

Unauthenticated PHP Object Injection to RCE in WP Activity Log <= 5.6.3.1 (CVE-2026-54806) - joshuavanderpoll/CVE-2026-54806

Open Source C2 Framework for Authorized Security Testing - Nakano-04/c2-dect-lite

二开dddd攻防信息收集扫描工具. Contribute to ddddpro/ddddpro development by creating an account on GitHub.

POC for CVE-2026-23744 for a python revshell. Contribute to daemoncibsec/mcpExec development by creating an account on GitHub.

CVE-2026-39031 — offline plaintext password recovery for Lansweeper lsrunase 2.0 / lsencrypt 2.0 via a hardcoded RC4 key. PoC + technical advisory. - user6400/cve-2026-39031-lansweeper-lsrunase2-ls...

Vulnerability Scanner. Contribute to Somyaranjan7/SentinelScan development by creating an account on GitHub.

Contribute to 0xgh057r3c0n/CVE-2026-48907 development by creating an account on GitHub.

Passive Windows malware scanner with YARA detection, live threat intelligence feeds, and a real-time Flask dashboard. - nitrofx210/silentguard

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rul...

CyberShield Pro is a Flask-based web vulnerability scanner that performs SSL validation, security header analysis, port scanning, WHOIS lookup, XSS detection, SQL injection detection, risk assessme...

CASxploit – Windows SYSTEM reverse shell tool via PsExec with UAC bypass support. - p1rater/CASxploit

Purple-team threat modeling in the browser. Zero dependencies. One HTML file. Offense and defense on one canvas. - BenjiTrapp/PurpleSkjaldborg

CVE-2026-49772 — The Events Calendar (WordPress) unauthenticated blind SQLi PoC - joshuavanderpoll/CVE-2026-49772

A collaborative hub for Nuclei templates. Contribute, share, and explore powerful vulnerability detection tools! - Spix0r/Nuclei-Community-Templates

Contribute to oduoke567/copybara-xxe-poc development by creating an account on GitHub.

Experimental red-team firmware for ESP32-S2/S3. Features USB HID keyboard emulation, multi-layer AMSI bypass, CVE-2026-20817 WER ALPC exploitation, 12 built-in payloads, and WiFi C2 with AES-256-GC...