AI-powered penetration testing CLI — static analysis, dynamic scanning, and intelligent triage. - andupetcu/penclaw

Self-hosted toolkit to load-test & security-scan your own apps — any stack, sandboxed, Docker-based. Orchestrates k6, ZAP, Nuclei, nmap. Authorized testing only. - website-f/orion-web-test

Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxit PDF Reader updater service. - Paradoxis/CVE-2026-57239

基于 Spring Boot 4.0 + Spring AI 2.0 的钓鱼网站检测后端服务，通过大语言模型对网页内容进行语义分析，识别钓鱼/欺诈网站。 - kamisheng/phishing-detector

nginx heap buffer overflow PoC — CVE-2026-42533 pre-auth RCE via two-pass capture clobbering. Crash confirmed on Ubuntu 24.04. - imbas007/CVE-2026-42533

Web安全漏洞学习平台 | PHP + MySQL | OWASP Top 10 常见漏洞原理、利用与修复 | 个人首个安全项目 - CHN-zlt-666/Web-Master-Lab

Internship task where I simulated a multi-stage APT — phishing, persistence, lateral movement, DNS tunnelling exfil — then switched to Blue Team and detected/investigated it using Security Onion, W...

基于VMware搭建的双层网络渗透测试靶场环境（DMZ区+服务器区），包含Web漏洞挖掘、内网穿透代理搭建、Metasploit提权及安全告警联动。 - buzhimingdeaikun/Dual-Network-Penetration-Test

Enhanced fork of the Autorize Burp Suite extension — adds a 'Scope & Exclude' tab (in-scope-only filtering + URL/endpoint exclusion list). - PratikKaran23/authorize-pro

A Python-based vulnerability scanner that detects open ports, identifies running services, checks them against a local CVE database, and generates a security report. Built with Flask, it provides a...

MCP Server Security Audit Engine — scan MCP servers for exec injection, path traversal, tool poisoning, SQL injection, command injection, SSRF vulnerabilities - syltharion/mcp-sentinel

Burp Suite Extension Template that helps test Burp Suite code with real Montoya API. - d0ge/extension-in-the-loop

Contribute to luantq0/yara-rules development by creating an account on GitHub.

CVE-2026-54121 (Certighost) AD CS DC-impersonation PoC. Patched SAN handling + MAQ-safe account reuse. - marcgoam/CVE-2026-54121-CertiGhost

Practitioner field guide + hands-on lab walkthrough for AWS, Azure, and GCP red teaming — IAM/Entra ID enumeration, privilege escalation, metadata SSRF, and automated tooling. - abdallaabdalrhman/C...

Sigma detections for real ATT&CK techniques, with a compiler that emits Wazuh, Splunk and Sentinel from one source. 36 rules, 33 techniques, MIT. - zshguy/tyrian-detection-pack

一个 Windows 桌面取证工具，用于快速采集计算机上的各类数字痕迹和证据，适合安全调查、应急响应和内部审计场景。 - stushansusu/forensic-collector

舆情演练红蓝对抗. Contribute to simonliu1358/yuqing development by creating an account on GitHub.

Advanced XSS vulnerability scanner using Selenium and real browser execution verification for authorized security testing and bug bounty research. - pratikkhairnar160/Vaelion-XSS

A Python-based mini vulnerability scanner for port scanning and security checks. - Mactoy1/Vulnerability-Scanner

Malware analysis of a malicious PuTTY executable (Trojan.Dropper) that extracts a PowerFun PowerShell reverse shell. Includes IOCs, YARA rule, and full analysis report. - Stefan-Krijt/Putty_Patrol