Intentionally vulnerable web app (Java/JS/SQL): builds+runs in Docker, 28 exploitable vulns, POC exploit suite, reference SARIF + SAST checker. DO NOT DEPLOY. - Vikentiuiy/vulnerable-web-app

Full-stack API vulnerability scanner targeting the OWASP API Security Top 10 with configurable scan modules and a React dashboard. - Tabaxi3000/api-security-scanner

Safe commit - cpp based security vulnerability scanner - dev4nshuu/Safe-Commit

Automated malware static-analysis toolkit: PE parsing, IOC & string extraction, YARA, heuristic threat scoring. DFIR-focused. - sltcnb/Pandora-Sandbox

CVE-2026-63030: WordPress REST batch-endpoint array desync. Mechanism, detection, mitigation, and a safe reproduction lab. - ZenithGenius/wordpress-batch-rce-lab

Python CLI for scanning files against YARA rules to detect malware patterns - FatimaCyberLabs/YARA-Scanner

Educational Python vulnerability scanner featuring concurrent TCP scanning, service fingerprinting, SQLite CVE enrichment, and OWASP mapping. - wittymastodon/lightweight-vulnerability-scanner

Security research notes, CVE walkthroughs, and lessons from 0xNull team — pentesting, OSINT, exploit dev, threat hunting. - 0xnull-sec/sec-notes

DEF CON 34 workshop for redStack: deploy a Mythic/Sliver/Adaptix red team lab on AWS with Terraform and run a full boot-to-breach attack path over OpenVPN. - BaddKharma/redStack-defcon34

Python version of the OpenNetAdmin 18.1.1 RCE that provides a shell - JoeyLipton/OpenNetAdmin-18.1.1-ReverseShell

PoC of getting an RCE on Prestashop with admin credentials - nmagill123/prestashop-admin-rce

Stuff I be lookin @. Contribute to Rat5ak/Rat5ak-Nadsec-2026-CVE-CERTIFIED-HOOD-CLASSICS development by creating an account on GitHub.

The wp2shell vulnerability chain represents one of the most significant WordPress Core security issues in recent years. Because exploitation begins with an unauthenticated request and can ultimatel...

Yara and Yara X Linter . Contribute to ThreatFlux/yrlint development by creating an account on GitHub.

Contribute to Nizar-Lams/Yara-rules development by creating an account on GitHub.

泄露的针对各种 iOS 版本的漏洞利用工具包. Contribute to adoemwanmei/coruna-pro-v2 development by creating an account on GitHub.

Focused XSS fuzz scanner with smart payloads, reflection analysis, CSP checks, WAF hints, DOM sink detection, and optional browser validation. - rafashaalfiandi/XSSentinel

Burpsuite Extension - Cryptod decrypts and re-encrypts AES ciphertext inline while you test, so you do not have to copy ciphertext out to an external tool. - justakazh/cryptod

Self-hosted AI web-app vulnerability scanner — HPE Private Cloud AI framework - mlyu2000/ai-vulnerability-scanner

My penetration testing dashboard - runs nmap scans, msf exploitation, and loot the information in an easily digestible browser-based workflow. - Null-H3x/h3x-dash

Defensive NGINX CVE-2026-42533 map regex risk audit with config scanner, Splunk/Defender notes, and lab evidence. - srkyn/nginx-map-risk-audit