Async web vulnerability scanner — detects SQL injection, reflected XSS and LFI/path traversal by auto-crawling forms and links. Ships with a deliberately vulnerable Flask app for local demos. - Vic...

authorized VDP stored-xss test. Contribute to AmrMohammed07/cr-vdp-xss development by creating an account on GitHub.

A proof-of-concept extension for Burp Suite to get the hang of how to write one. - jpg2368-RIT/burp-poc

Multi-vector DevOps attack surface analysis — 18 CVEs across 12 tools mapped into a 9-layer kill chain. Includes deep-dive docs, attack chain simulations, and 56 detection rules (YARA, Sigma, Snort...

ScriptFang is a weaponized payload generation and fuzzing toolkit I built for Red Teamers, Bug Bounty hunters, and offensive security professionals. ScriptFang crafts advanced XSS payloads, tests r...

ESP32-based iot vulnerability scanner. Contribute to Rajveersoni9/iot-sentinel development by creating an account on GitHub.

This repository contains a proof-of-concept (PoC) exploit for CVE-2026-38751, affecting OpenSTAManager ≤ 2.10. The vulnerability allows an authenticated attacker to upload a malicious module via t...

Contribute to K3ysTr0K3R/CVE-2025-57819 development by creating an account on GitHub.

BLOODFANG is my second cutting-edge red team offensive toolkit, crafted for rapid reconnaissance, exploitation, and post-exploitation operations. Packed with advanced modules like password spraying...

Offline desktop studio for writing, testing and managing YARA rules — Tauri 2 + YARA-X, 100% local - platinum2high/yara-studio

A blazingly fast, multi-threaded TUI malware analysis tool built in Rust. Features deep PE parsing, YARA scanning, and heuristic risk scoring. - Rhacknarok/hacksguard

CVE-2026-13768: Privileged iothubowner IoT Hub credential — fleet enumeration, device RCE, home-network pivot — Gardyn (ICSA-26-183-03) - MichaelAdamGroberman/CVE-2026-13768

Deliberately-vulnerable PHP web app: 5 attacks (SQLi, stored/reflected XSS, brute force, directory traversal) each with a hardened fix. Educational/portfolio lab. - sarjanpatel22/web-app-security-lab

A Python based vulnerability scanner that automatically identifies security weaknesses, misconfigurations, and potential attack vectors in systems, networks, and web applications. - AZA738/Vulnerab...

Desktop malware scanner built with Python that combines VirusTotal API, YARA rule scanning, encrypted API key storage, SHA-256 hashing, caching, and exportable scan reports. - VijayShanbhag/VT-Desk...

CVE-2026-54477: Admin Panel Missing Security Headers (clickjacking/XSS) - Gardyn (ICSA-26-183-03) - MichaelAdamGroberman/CVE-2026-54477

SCPN Vulnerability Scanner is a comprehensive scanning tool designed to detect vulnerabilities in websites, applications, and router devices. The tool scans and analyzes targets using various tools...

Exploiting Parsec for Windows to gain SYSTEM privileges - tomadimitrie/CVE-2026-54424

Static malware triage tool. Contribute to SatchelKill/malscan development by creating an account on GitHub.

Gorse < 0.5.10 contains an authentication bypass caused by empty admin_api_key in /api/dump and /api/restore endpoints, letting unauthenticated remote attackers access and modify protected d...

Static malware triage tool. Contribute to mason-rosenberger/malscan development by creating an account on GitHub.