A Retrieval-Augmented Generation (RAG) based Cybersecurity Knowledge Assistant using FAISS, Ollama, Qwen3.5, CVE datasets, Nuclei templates, and internal security reports. - iamnikitakhare/Cybersec...

Detect, assess, and respond to supply chain attacks across npm/yarn and Python (pip/poetry/uv). Claude Code skill + standalone scripts. Built during axios RAT (2026-03-31) and Starlette BadHost CVE...

A tool dedicated to process, analyze and propagate arbitrary vulnerability scanner reports! - bwInfoSec/VulnerabilityHub

Advanced secret & vulnerability scanner. Contribute to mtsboy01/mts-secret-scanner development by creating an account on GitHub.

jChain-Static is a static database of known vulnerability exploitation chains. Given an entry point (e.g., XSS, SQLi, SSRF), it generates step-by-step playbooks showing possible paths to escalate f...

Contribute to Hunt-Benito/llama-factory-webui-rce-cve-2026-58116-trust-remote-code-model-path-injection development by creating an account on GitHub.

Contribute to vinhluongptit/React2Shell-Next.js-RCE-POC-CVE-2025-55182- development by creating an account on GitHub.

This Vulnerability Scanner is a comprehensive security assessment tool designed for penetration testing and vulnerability assessment. It automates the process of identifying security weaknesses in ...

Contribute to Thongheng/BurpCipherKit development by creating an account on GitHub.

A modified version of the Rapid7 Metasploit module for CVE-2021-27877 that supports direct command execution for reliable vulnerability validation. Includes documentation explaining the exploit wor...

蓝队应急响应 / Incident Response / Linux 主机取证 纯 Bash 实现,零依赖,一条命令跑完 13 个排查模块 + 风险评分 + 横向移动证据链。 - A4n9g7e2l/Xway

设计并实现一款图形化的 H3C 路由器配置泄露检测工具，具备以下核心能力： 1. 多目标并发扫描 2. 路径穿越漏洞检测与利用 3. 配置文件敏感信息自动提取 4. 弱口令验证 5. 结果导出与可视化展示 - myname-noname/H3C-Router-Security-Scanner

swagger xss Dom,Reflected. Contribute to ynsmroztas/domswagger development by creating an account on GitHub.

Authorized, non-destructive web security scanner — recon + checks (headers, exposed secrets, discovery, CORS, open redirect, reflected XSS) with JSON/Markdown reports. Built rung-by-rung. - Vl4dimi...

ScanMe is a Python & Flask-based web vulnerability scanner containerized with Docker for consistent deployment. It automates security assessments by detecting common web vulnerabilities and...

Python POC, Exploit for CVE-2026-33017. Contribute to c0gnit00/CVE-2026-33017 development by creating an account on GitHub.

Protocol Buffers and gRPC services Burp Extension. Contribute to doyensec/protospector development by creating an account on GitHub.

Simulated a real-world Stored Cross-Site Scripting (XSS) attack on the OWASP Juice Shop application by exploiting session hijacking vulnerabilities in a controlled Docker environment. Strengthened ...

Modular AI-inspired web vulnerability scanner with XSS/SQLi detection, security header analysis, severity engine, and automated PDF reporting. - monikachak/web-vulnerability-scanner

MCP server for vulnerability research - CVE search, exploit discovery, CVSS calculator, and Nuclei template finder - 99-sketch/vuln-research-mcp

A lightweight Vulnerability Scanner designed to identify common security weaknesses in systems and web applications. The tool performs basic security checks, detects potential vulnerabilities, and ...