Java 源码离线审计工具 — 面向 100MB+ 反编译 Spring Boot 源码包的自动化安全审计。零依赖纯 Python，项目代码识别 | API 端点提取 | CVE 漏洞匹配 | 攻击利用链分析 | 10 章中文 Markdown 报告。适用于安全测试、CTF、代码审查、白盒审计。 - fewftybet/java-audit-tool

Remote Code Execution. Contribute to YsnBnc/rce development by creating an account on GitHub.

module for vulnerability scanner project. Contribute to matthewrstone/puppet-vuln_scan development by creating an account on GitHub.

A Python-based vulnerability scanner using Nmap with service detection, OS detection, banner grabbing, and report generation. - Pree-tools/VulnScanner-Pro

Contribute to mlemkeRT/confluence-dashboard-poc development by creating an account on GitHub.

把 Burp Suite 33 个插件（26 核心 + 7 Phase 3 高级工具）通过 MCP 协议桥接到 AI 客户端 - A4n9g7e2l/burp-mcp-bridge

This is a Python-based GUI tool for static analysis of various file types including executables, compressed files, documents, and PDFs. It identifies file types by signature, extracts metadata, ch...

To determine if a host is vulnerable to log4j CVE‐2021‐44228 - yahoo/check-log4j

Curated offensive security tools and references — AD, web app, cloud, containers, C2, exploit dev, OSINT - byoniq/Security-Resources

Contribute to juho-cphrx/kiro-pr-rce-poc development by creating an account on GitHub.

gRPC-Go RBAC Authorization Policy Bypass via Missing `:path` Slash (Auth Bypass) - JohannesLks/CVE-2026-33186

CVE-2026-43284 - CVE-2026-43500 - CVE-2026-46300 Variant of dirtyfrag exploit - MadExploits/CVE-2026-46300

The most comprehensive XSS cheatsheet on GitHub — payloads, filter bypass, WAF evasion, CSP bypass, DOM XSS, blind XSS, and real CVEs. - ardakocadoruu/xss-cheatsheet

Privilege Escalation Enumeration & Exploitation Tool and Comprehensive Vulnerability Scanner with Exploit Methods. - MadExploits/linemadpeas

Crypto-agile secrets vault: envelope encryption (HKDF · AES-256-GCM · ChaCha20-Poly1305), key rotation, JWT auth with revocation, from-scratch TOTP MFA, RBAC & audit logging. Java 21 · Spri...

行业调研引擎——researcher CLI + 多Agent红蓝对抗式研究。Quick/Brief/Standard/Comprehensive四种深度，证据驱动，支持Hermes/Claude。 - eddywang/industry-research-skill

One command. Full malware analysis. Generates YARA, Sigma, IOCs, MITRE mappings, and reports. - prxcode/malforge

CVE-2026-58138 — Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator (HostAccess.ALL). Lab + PoC, verified e2e (root). - BiiTts/CVE-2026-58138-Conductor-Unauth-RCE

CVE-2026-46490 — samlify <2.13.0 SAML AttributeValue XML injection -> signed-assertion privilege escalation. Self-contained PoC, verified e2e. - BiiTts/CVE-2026-46490-samlify-SAML-Att...

A Rust shellcode loader for Windows x64 with AES-256-GCM encryption, AMSI/ETW bypass, sleep jitter, and sandbox detection. Cross-compiled from Linux via MinGW-w64. - yepskotch/FiveDeez

Advanced Web Vulnerability Scanner is a cutting-edge, enterprise-grade security assessment platform designed by "Ali Zafar" to revolutionize web application penetration testing - ...