VulnSight is a Python-based automated vulnerability scanner that uses Nmap and the NVD API to identify open ports, detect services and software versions, correlate vulnerabilities with known CVEs, ...

Demonstrated SQL Injection, Stored XSS, and CSRF vulnerabilities using DVWA in a safe Docker environment and documented secure mitigation techniques. - KONDAMADHAN/Web-Vulnerability-Assessment-DVWA

Educational Node.js web security app demonstrating Stored/Reflected XSS attacks and context-aware HTML entity escaping defenses. - tahniatfarhan/xss-vulnerability-prevention-demo

VulnLedger — open-source SBOM generator and vulnerability scanner CLI. CycloneDX/SPDX, 20+ ecosystems. - SaadEddine-ware/Vulnledger

Unofficial Gitleaks integration/extension for Burp Suite - TheArqsz/BurpSuite-Gitleaks-Extension

【Java计算机毕业设计分享】基于Jboss的渗透测试研究平台，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - n6jx7ld0er/EQhJdxozoK

Lightweight Windows EDR — ETW agent, mTLS transport, FastAPI backend, Sigma/YARA detection engine, and React dashboard with response actions. MITRE ATT&CK mapped. - Ayyadi266/LightEDR

Modular command and control for redteam operations. - farinap5/PurpleCommand

Small, domain-free Go building blocks: structured logging, an HTTP client with retries and SSRF guarding, GoFiber helpers, a stale-while-revalidate cache, and a SQLite migration runner. - neodata-i...

Jython (Burp extension) implementation of Google's csp-evaluator project - TheArqsz/csp-evaluator-burp

Authenticated Blind OS Command Injection in ClearOS - LazyTitan33/CVE-2026-67599_ClearOS_RCE

Schema-aware GraphQL security testing — CLI tool + Burp Suite extension (22 checks) - RyanCTF/graphql-scout

Nim-based C2 framework (claude says this a *R@T* btw) built for red team ops, WebSocket comms, built to survive and adapt in hostile environments. Built by an operator, for operators. - sarthakdev1...

🔥 Next-Gen Android C2 Framework — Professional Admin Panel, Stealth Bypass, Dropper Chain & Real-Time Surveillance and more - ZEEFAST/ZEE-DSP

Web security audit tool with advanced waf bypass. Contribute to Skokoo/ImCurvin development by creating an account on GitHub.

This is a vulnerability scanner for web application - daxemond/daxemond-web-sec-scanner

Vulnerability scanner for Caido. Contribute to caido-community/scanner development by creating an account on GitHub.

CTF Pwn 入门学习复盘、漏洞分析、EXP 汇总. Contribute to hyuzhou67-ui/Pwn-Learning-Writeups development by creating an account on GitHub.

b漏洞扫描Agent，覆盖子域→资产→爬虫→漏洞→POC→CVSS评分→报告全流程，支持CLI/Web/REST API，适配漏洞盒子/SRC提报， - qiudongshen/-Web-Agent-8-POC-CVSS-v3.1-

Linux control panel for the zapret/nfqws DPI bypass engine — systemd service, nftables, encrypted DNS, gateway mode, GTK4 UI (EN/TR) - WinTone01/Unwall