PoC Tool 是一款批量漏洞探测工具，基于 POC 模板定义漏洞检测规则。工具可对多个目标 URL 执行自动化漏洞检测，每个 URL 会依次执行所有已加载的 POC 检测规则。当未加载到有效 POC 时，自动降级为基础连通性扫描模式（仅检测目标 HTTP 可达性）。支持并发扫描、断点续扫、二次检测等功能，提供命令行、交互式和图形界面（GUI）三种运行模式。 - AukSoryu/Poctool

A Python-based Mini Vulnerability Scanner with port scanning, service detection, banner grabbing, risk classification, logging, and report generation. - kritipurohit/mini-vulnerability-scanner

VampSecure Labs — Laboratorio shellcode ARM64: mmap RWX, syscalls directas y ejecucion de codigo nativo - belky-me/vamp-shellcode-lab

Advanced YARA Rules Collection A comprehensive, highly categorized repository of 400+ professional YARA signatures for defensive security research, malware analysis, and threat hunting. - 4li466as/...

Erebus: an AI-native C2 framework, architected from the ground up for AI-assisted operations. Human-in-the-loop by design, with secure infrastructure and a modular, cross-platform core. Solo-built,...

CVE-2026-66066 + File Read, RCE, Scanner, Lab . Contribute to 0xsha/KindaRails2Shell development by creating an account on GitHub.

A critical vulnerability affecting Fastjson versions 1.2.68 – 1.2.83. - 1xPwn/CVE-2026-16723

Cloud security scanning: IAM privilege escalation, public S3 buckets, SSRF metadata exfiltration - S0hamRay/Warden

A polite, security-conscious web crawler & scraper in Python. Respects robots.txt and rate limits, guards against SSRF, and exports structured data as JSON Lines. - mojtaba-py-code/web-scraping

Burp Suite extension for automated multi-tenant IDOR detection - Ziffrit/tenant-isolation-mapper

GhostLock (CVE-2026-43499) exploit for POCO F3 GT (aresin) — MediaTek Dimensity 1200, Linux 4.14.186 ARM64 kernel privilege escalation via futex PI chain manipulation - NothingFumo/ghostlock-aresin

【Java计算机毕业设计分享】基于SSM的漏洞扫描器管理系统，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - nib82096oz/oiXLBBopLC

【Java计算机毕业设计分享】基于Django的防Web漏洞人事管理系统，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - d558mju7m2/MVoiTmeUMb

PCAP dosyalarinda C2 beacon, DNS tuneli ve veri sizintisi arayan ag analiz araci - onurtnc/netsentry

VulnSight is a Python-based automated vulnerability scanner that uses Nmap and the NVD API to identify open ports, detect services and software versions, correlate vulnerabilities with known CVEs, ...

Demonstrated SQL Injection, Stored XSS, and CSRF vulnerabilities using DVWA in a safe Docker environment and documented secure mitigation techniques. - KONDAMADHAN/Web-Vulnerability-Assessment-DVWA

Educational Node.js web security app demonstrating Stored/Reflected XSS attacks and context-aware HTML entity escaping defenses. - tahniatfarhan/xss-vulnerability-prevention-demo

VulnLedger — open-source SBOM generator and vulnerability scanner CLI. CycloneDX/SPDX, 20+ ecosystems. - SaadEddine-ware/Vulnledger

Unofficial Gitleaks integration/extension for Burp Suite - TheArqsz/BurpSuite-Gitleaks-Extension

【Java计算机毕业设计分享】基于Jboss的渗透测试研究平台，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - n6jx7ld0er/EQhJdxozoK