Static malware triage tool. Contribute to mason-rosenbergerl/malscan development by creating an account on GitHub.

开源云安全事件响应 Skill：证据保全、事件时间线、影响范围、可逆遏制、恢复与复盘。. Contribute to linxumoney/cloud-incident-coach development by creating an account on GitHub.

Contribute to hackerabhinavverma/burp-mcp development by creating an account on GitHub.

Async web vulnerability scanner with real-time SSE progress - cr-akshayvarun/web-vuln-scanner

my active recon and vulnerability scanner framework - OctaYus/FalconHunter

Burp Suite Operations Toolkit Shortcut Menu Extension. Burp Suite 常用工具集快捷菜单插件 - opsqw/Axon

JWT 密钥被动扫描爆破 BurpSuite 插件. Contribute to opsqw/burp-opjwt development by creating an account on GitHub.

HackBar – Burp Suite Plugin Edition with Real-World Optimized Payloads - feng-mian01/HackBar

PatternShield is an advanced Web Exploit Detection and Vulnerability Assessment Framework developed by Jyothendra. It automatically fingerprints web technologies using multiple detection engines, i...

Mini YARA malware detector: 10 hand-written rules, safe synthetic test samples, Python scanner with SHA-256 fingerprinting. Educational project. - zainabh4san/mini-yara-detector

[⚠️ In Progress] An automated workflow that ingests suspicious files, performs malware analysis in sandbox, and generates actionable security reports. - jesuismarie/Automated-Malware-Analysis-Workflow

OPPO Find X6 Pro GhostLock (CVE-2026-43499) exploit adaptation - Thiasap/oppo-pgem10-ghostlock

High-performance web vulnerability scanner featuring 60+ security checks, real-time analysis, and automated reporting. - NAIF-alghamd1/devil

Edit PDF files directly in your browser with this TypeScript toolkit, ensuring all document processing stays local for privacy. - Bigeye1445/pdfstudio

Burp Suite Pro extension that runs sqlmap with a bundled Python+sqlmap runtime — no local install needed. Repeater-style tabs, native Burp issues, HTML report. - chan770/Burp-sqlmap

Burp Suite SQL 注入辅助检测插件，仅用于授权安全测试. Contribute to kenny25526/kennysql development by creating an account on GitHub.

A combination of CVE-2026-55494 and GHSA-c2h5-ppv9-7vrq to get root privilege RCE in tugtainer - 4qu4r1um/tugtainer-1.30.2-RCE

Reproducer for CVE-2026-43867 — Apache Camel camel-pqc AwsSecretsManagerKeyLifecycleManager unsafe key-metadata deserialization (RCE) - oscerd/CVE-2026-43867

1. P（Preparation，准备）：准备阶段，组建应急响应团队，准备工具和文档 2. D（Detection，检测）：检测阶段，确认安全事件是否发生，收集初步信息 3. C（Containment，抑制）：抑制阶段，限制事件影响范围，防止进一步扩散 4. E（Eradication，根除）：根除阶段，清除恶意代码、后门，修复漏洞 5. R（Recovery，恢复）：恢复阶段，恢复系统正...

Unauthenticated Arbitrary File/Folder Deletion in Joomla Helix Ultimate (JoomShaper) <= 2.2.6 — CVE-2026-57830 - Is4yev/CVE-2026-57830

Unauthenticated Stored XSS in Joomla Helix Ultimate (JoomShaper) <= 2.2.6 - Is4yev/CVE-2026-57829