Demonstrated SQL Injection, Stored XSS, and CSRF vulnerabilities using DVWA in a safe Docker environment and documented secure mitigation techniques. - KONDAMADHAN/Web-Vulnerability-Assessment-DVWA

Educational Node.js web security app demonstrating Stored/Reflected XSS attacks and context-aware HTML entity escaping defenses. - tahniatfarhan/xss-vulnerability-prevention-demo

VulnLedger — open-source SBOM generator and vulnerability scanner CLI. CycloneDX/SPDX, 20+ ecosystems. - SaadEddine-ware/Vulnledger

Unofficial Gitleaks integration/extension for Burp Suite - TheArqsz/BurpSuite-Gitleaks-Extension

【Java计算机毕业设计分享】基于Jboss的渗透测试研究平台，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - n6jx7ld0er/EQhJdxozoK

Lightweight Windows EDR — ETW agent, mTLS transport, FastAPI backend, Sigma/YARA detection engine, and React dashboard with response actions. MITRE ATT&CK mapped. - Ayyadi266/LightEDR

Modular command and control for redteam operations. - farinap5/PurpleCommand

Small, domain-free Go building blocks: structured logging, an HTTP client with retries and SSRF guarding, GoFiber helpers, a stale-while-revalidate cache, and a SQLite migration runner. - neodata-i...

Jython (Burp extension) implementation of Google's csp-evaluator project - TheArqsz/csp-evaluator-burp

Authenticated Blind OS Command Injection in ClearOS - LazyTitan33/CVE-2026-67599_ClearOS_RCE

Schema-aware GraphQL security testing — CLI tool + Burp Suite extension (22 checks) - RyanCTF/graphql-scout

Nim-based C2 framework (claude says this a *R@T* btw) built for red team ops, WebSocket comms, built to survive and adapt in hostile environments. Built by an operator, for operators. - sarthakdev1...

🔥 Next-Gen Android C2 Framework — Professional Admin Panel, Stealth Bypass, Dropper Chain & Real-Time Surveillance and more - ZEEFAST/ZEE-DSP

Web security audit tool with advanced waf bypass. Contribute to Skokoo/ImCurvin development by creating an account on GitHub.

This is a vulnerability scanner for web application - daxemond/daxemond-web-sec-scanner

Vulnerability scanner for Caido. Contribute to caido-community/scanner development by creating an account on GitHub.

CTF Pwn 入门学习复盘、漏洞分析、EXP 汇总. Contribute to hyuzhou67-ui/Pwn-Learning-Writeups development by creating an account on GitHub.

b漏洞扫描Agent，覆盖子域→资产→爬虫→漏洞→POC→CVSS评分→报告全流程，支持CLI/Web/REST API，适配漏洞盒子/SRC提报， - qiudongshen/-Web-Agent-8-POC-CVSS-v3.1-

Linux control panel for the zapret/nfqws DPI bypass engine — systemd service, nftables, encrypted DNS, gateway mode, GTK4 UI (EN/TR) - WinTone01/Unwall

A hands-on malware analysis project demonstrating static analysis of ELF and PE files using Kali Linux, YARA, Binwalk, and Python. - Maryam249-2007/Malware-Analysis-Lab