Python-based vulnerability scanner that performs multi-threaded port scanning, banner grabbing, and outdated software detection on network hosts. Also audits web apps for missing security headers, ...

Python CLI scanner that audits web apps against the OWASP Top 10 — security headers, open redirects, SQLi/XSS indicators, CORS misconfig, sensitive file exposure, and more. - Moscvv/websentinel

🚨 真实应急响应实战靶场笔记：在极端不出网环境下，通过进程溯源、代码审计，彻底根除 Java 挖矿木马及 crontab/sh 隐藏持久化权限维持后门。 - JY-666-YINZI/Linux-schoolncident-response

Talon — Kernel-level mini EDR detecting DKOM hidden modules, syscall table hooks, ptrace injection, and C2 beacon patterns via kallsyms + kprobes + netlink. Built as the defensive counterpart to Ti...

Contribute to Greejith-k/Stored-Cross-Site-Scripting-Stored-XSS-Vulnerability-in-Beetel-450TC3-Router development by creating an account on GitHub.

AI-powered Web Vulnerability Scanner using Flask, Machine Learning, and Llama 3.1 for intelligent security analysis and vulnerability detection. - ayushoj28/ai-vuln-scanner

Due to improper permission checks on the app server, attackers can trigger JNDI injection via the "loadTree" interface to achieve RCE (requires lower JDK versions). Legacy vuln, p...

🚀 A high-performance, multi-processing RCE scanner & exploit helper written in Python. Specifically designed for fast, concurrent vulnerability scanning in isolated network environments.一款高...

PetClinic RAG (Retrieval-Augmented Generation) Proof of Concept is a backend-focused AI application built with Spring Boot and Spring AI to explore enterprise document retrieval using vector databa...

安全告警日志智能分析报告工具 —— 基于 360 NDR/EDR 导出的 Excel 安全日志，自动生成含多维度统计图表（matplotlib）的 Markdown 安全分析报告，支持威胁类型分析、攻击溯源、横向移动检测、动态安全建议等。 - gutddts/security-log-report

Lightweight multi-engine antivirus for Windows — ClamAV + YARA rules + VirusTotal in one ~280 KB portable exe. Zero dependencies, builds with the csc.exe already inside Windows. - alexbeatnik/AV

Strix 落地与调教完全指北 —— 这是一个专注于下一代自主 AI 渗透测试代理Strix 的实战部署与性能榨干指南。 以及如何通过 --instruction 指令化身“赛博御兽师”操纵 AI 黑客注意力的进阶玩法的核心沉淀。内含国内网络环境下 Docker 0/33 沙箱卡死究极加速方案，全网最全的多模型（DeepSeek-V4、Claude、火山引擎、OpenRouter）高性价比...

SQL 注入自动化脚本-渗透项目/渗透工具/脚本文件. Contribute to JY-666-YINZI/Python_SQL_inj_test.py development by creating an account on GitHub.

Contribute to jimdixx/Digital-Archiving-Solutions-RCE-PoC development by creating an account on GitHub.

Open-source AI-assisted VAPT platform for automated vulnerability scanning, evidence verification, deterministic CVSS scoring, and actionable security remediation. - maverickaayush/ONUS

A CLI-based malware scanning tool that analyzes uploaded files using YARA rules and static analysis techniques to detect suspicious and potentially malicious files. Built with modern web technologi...

Poc CVE Collection. Contribute to HORKimhab/poc-cve-collection development by creating an account on GitHub.

Burp Suite Community extension for generating editable CSRF proof-of-concept HTML - rust-memo/csrf-poc-generator

This extension enhances Burp Suite by adding several UI and functional features, making it more user-friendly. - irsdl/BurpSuiteSharpenerEx

Contribute to Nishant-Mane/Jenkins-Exp development by creating an account on GitHub.

云安全漏洞挖掘与利用 Skill。S3 桶爆破枚举、公开桶敏感文件发现、SSRF→IMDS 凭证窃取探测、K8s 未授权访问检测、容器逃逸条件识别、 AK/SK 凭证验证与权限枚举、存储桶供应链攻击利用。 - mouren101/cloud-vuln-skill