把 Burp Suite 33 个插件（26 核心 + 7 Phase 3 高级工具）通过 MCP 协议桥接到 AI 客户端 - A4n9g7e2l/burp-mcp-bridge

This is a Python-based GUI tool for static analysis of various file types including executables, compressed files, documents, and PDFs. It identifies file types by signature, extracts metadata, ch...

To determine if a host is vulnerable to log4j CVE‐2021‐44228 - yahoo/check-log4j

Curated offensive security tools and references — AD, web app, cloud, containers, C2, exploit dev, OSINT - byoniq/Security-Resources

Contribute to juho-cphrx/kiro-pr-rce-poc development by creating an account on GitHub.

gRPC-Go RBAC Authorization Policy Bypass via Missing `:path` Slash (Auth Bypass) - JohannesLks/CVE-2026-33186

CVE-2026-43284 - CVE-2026-43500 - CVE-2026-46300 Variant of dirtyfrag exploit - MadExploits/CVE-2026-46300

The most comprehensive XSS cheatsheet on GitHub — payloads, filter bypass, WAF evasion, CSP bypass, DOM XSS, blind XSS, and real CVEs. - ardakocadoruu/xss-cheatsheet

Privilege Escalation Enumeration & Exploitation Tool and Comprehensive Vulnerability Scanner with Exploit Methods. - MadExploits/linemadpeas

Crypto-agile secrets vault: envelope encryption (HKDF · AES-256-GCM · ChaCha20-Poly1305), key rotation, JWT auth with revocation, from-scratch TOTP MFA, RBAC & audit logging. Java 21 · Spri...

行业调研引擎——researcher CLI + 多Agent红蓝对抗式研究。Quick/Brief/Standard/Comprehensive四种深度，证据驱动，支持Hermes/Claude。 - eddywang/industry-research-skill

One command. Full malware analysis. Generates YARA, Sigma, IOCs, MITRE mappings, and reports. - prxcode/malforge

CVE-2026-58138 — Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator (HostAccess.ALL). Lab + PoC, verified e2e (root). - BiiTts/CVE-2026-58138-Conductor-Unauth-RCE

CVE-2026-46490 — samlify <2.13.0 SAML AttributeValue XML injection -> signed-assertion privilege escalation. Self-contained PoC, verified e2e. - BiiTts/CVE-2026-46490-samlify-SAML-Att...

A Rust shellcode loader for Windows x64 with AES-256-GCM encryption, AMSI/ETW bypass, sleep jitter, and sandbox detection. Cross-compiled from Linux via MinGW-w64. - yepskotch/FiveDeez

Advanced Web Vulnerability Scanner is a cutting-edge, enterprise-grade security assessment platform designed by "Ali Zafar" to revolutionize web application penetration testing - ...

Web Vulnerability Scanner | Defensive Security Assessment Tool - Saffiqmohammed/safxploitz

Contribute to deneuv/swagger-xss-htmli-poc development by creating an account on GitHub.

Jenkins-based CI/CD platform with standardised pipeline contracts, Cloud Native Buildpacks, and DevSecOps security scanning for polyglot applications - paruff/uFawkesPipe

php sql-injection xss pentesting cybersecurity web-security owasp ethical-hacking vulnerability-lab mysql security-research education kali-linux sqlmap appsec - Yasser-02G/Pentesting_web

An AI-powered SOC malware triage platform for static PE/ELF analysis, ML classification, YARA matching, ATT&CK mapping, risk scoring, and analyst-ready investigation summaries. - GurukiranS...