Evidence-driven scanner for HTTP request-header vulnerabilities — Host header injection, SSRF, confirmed cache poisoning, access-control bypass, open redirects and virtual-host discovery. Signal ov...

Upload a Minecraft mod .jar, get back a risk score, a verdict tier, and a line-by-line explanation of exactly what looks suspicious and why. - Microck/jarspect

Advanced Network Reconnaissance, Enum & Vulnerability Discovery Framework : A blazing-fast, comprehensive reconnaissance tool built in Go for modern security professionals. - MrEchoFi/Bann...

Contribute to xiaoyongwu/burp-hermes-bridge development by creating an account on GitHub.

CVE-2021-26855: PoC (Not a HoneyPoC for once!). Contribute to ZephrFish/Exch-CVE-2021-26855 development by creating an account on GitHub.

HoneyPoC 2.0: Proof-of-Concept (PoC) script to exploit IPv6 (CVE-2020-16898). - ZephrFish/CVE-2020-16898

【Java计算机毕业设计分享】基于Shiro框架的渗透测试管理系统，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - vo54ftydas/RXhDuamoMK

Find Subdomains MoFo - Burp Extension WIP. Contribute to ZephrFish/FSMF-BurpExtension development by creating an account on GitHub.

A collection of yara rules I've gathered over the years :-) - ZephrFish/Random-Yara-Rules

Reglas de deteccion YARA de MaikShield (antivirus). Descargadas y verificadas por SHA-256 automaticamente por la app. - repairium7/maikshield-rules

Adversary emulation toolkit — implants, payload generators, C2 infrastructure, phishing frameworks, disk imagers, kill switches, and assembly-level shellcode experiments. - cwill-telecom/Red-Cell

yublueflower is a security workflow to discover real-world threats using open-source tools such as urlfinder, katana, httpx, nuclei, and glow, with findings mapped to CWE and CVE using matcher patt...

FlowMind 官方文档站：AI-Native 应用安全平台用户指南、插件开发与集成说明。基于 VitePress，通过 GitHub Pages 发布。Official documentation for FlowMind — AI-Native Application Security Platform. User guides, plugin development, and int...

Vulnerability scanner. Contribute to cpeery24/my_scanner development by creating an account on GitHub.

【Java计算机毕业设计分享】基于Django的防Web漏洞人事管理系统，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - q015r4obh2/FgUsCQdEOV

Event-driven acoustic security proxy on AWS Lambda. Detects AI voice clones and deepfakes via Librosa MFCC feature extraction and Scikit-Learn SVM classification to prevent helpdesk social engineer...

Fastjson 1.2.83 RCE，无需 autoTypeSupport、无需第三方依赖， safeMode 未启用（默认）即可触发。 - qianliFISH/Fastjson-1.2.83-RCE-Analysis