AI-SAST: AI自动扫描漏洞. Contribute to pqfhappy/ai-sast development by creating an account on GitHub.

CVE-2026-50522 PoC. Contribute to 4minx/CVE-2026-50522 development by creating an account on GitHub.

APK爆毒免杀处理方案 - https://www.133l.com. Contribute to scdnai/apk-antivirus-evasion-20260725 development by creating an account on GitHub.

A vulnerability Scanner and Exploiter for Wordpress based on CVE 2024-10924 - Mr-Destroyer/WPGhost

Custom nuclei templates from authorized security assessments — full PoCs, version-based advisory triage, and exposure checks (Dolibarr and more). - y0no/nuclei-custom-templates

fastjson1283poc. Contribute to Ape1ron/fastjson1283poc_public development by creating an account on GitHub.

Contribute to ea826827-beep/Reflected-xss development by creating an account on GitHub.

Automated cross-site scripting vulnerability detector. - zeroSlick/XSS_SCANEER

"Lightweight Python network + web vulnerability scanner with CLI and desktop GUI, automatic CVE lookup, and HTML/JSON reporting" - mukidulislamzihad/vulnassess

PoC for CVE-2026-65694 — Microweber CMS (<=2.0.20) unauthenticated path traversal → arbitrary file read (.env / secrets) - abdugafforov-bobur/CVE-2026-65694-PoC

HexHunter is a lightweight and beginner-friendly web vulnerability scanner designed for basic penetration testing. It crawls websites and detects common vulnerabilities such as SQL Injection (SQLi)...

用于生成 fastjson 1.2.83 RCE 所需要的 Jar 包，含内存马注入功能。. Contribute to heihu577/fastjson-1.2.83-rce-jar-generator development by creating an account on GitHub.

Technical analysis and advisory for CVE-2026-48908: Unauthenticated Arbitrary File Upload to RCE in JoomShaper SP Page Builder. - imXur/CVE-2026-48908-Joomla-SP-Page-Builder-RCE

7-Zip XZ Decoder Heap Buffer Overflow - Full analysis, root cause, PoC, and RCE exploitation roadmap - liyuxuan504-byte/CVE-2026-14266

Mobile command center for Red Team operators. Vuln tracking, C2 monitoring, encrypted payload vault. Built with Flutter + Firebase. - AbdoFawzi777/redops-hub-website

Static security scanner and linter for GitLab CI. Finds .gitlab-ci.yml misconfigurations, supply-chain risks, and leaked secrets. Offline, SARIF output, OWASP CICD-SEC and CWE mappings. - glsec/glsec

接入ai分析的集成信息收集工具，集成了多个主流github上优秀的信息收集工具，并通过ai进行自动化信息整理，精准高效暴露突破口给予渗透人员 - SilasWu50/InformationCollecter-With-AI-analyzing

A simple Python-based vulnerability scanner that detects open ports, identifies common services, checks possible security issues, and generates a scan report. - Kalsoom-Gill/Syntecxhub_Vulnerabilit...

Active Directory pentesting tool for Linux. Automated Kerberoasting, AS-REP Roasting, ADCS/ESC exploitation, DCSync, BloodHound integration, and 100+ AD attack paths. ENS Alto / NIS2 / ISO 27001 co...

这是一款接入ai分析的集成信息收集工具，集成了多个主流github上优秀的信息收集工具，并通过ai进行自动化信息整理，精准高效暴露突破口给予渗透人员 - SilasWu50/WebScanner-with-AI

Burp2Postman is a Java/Montoya Burp Suite extension that sends selected HTTP requests directly to Postman. It does not export a collection file and does not hardcode workspace, collection, or folde...