secMONSTER performs 150+ security tests including XSS, SQLi, RCE, SSRF, LFI, SSTI, XXE, NoSQL, CMDi, CRLF, open redirect, JWT attacks, OAuth/SAML bypass, cloud metadata (AWS/GCP/Azure), container e...

Fast and customized vulnerability scanner for the «ownCloud Nextcloud Unprotected Data Directory» vulnerability. - Lednerb/CloudPeeker

Python network vulnerability scanner with service detection and vulnerability reporting. - VivekDasare/network-vuln-scanner

扫出你实际装的 Apache Shiro 模块与版本,逐条判定官方 26 条 CVE 里哪些真的落在你身上。按「CVE × 模块」判定,零依赖单 jar。 - xiaoqiMikko/shiro-check

Contribute to Hunt-Benito/e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout development by creating an account on GitHub.

Python-based vulnerability scanner that checks common open ports, analyzes HTTP security headers, identifies exposed server banners, and generates a basic vulnerability report for educational and a...

Lightweight cybersecurity malware triage and security analysis laboratory using Ubuntu, YARA, Python and open-source security tools. - ekeleu/CCS-Security-Analysis-Lab

A Java Agent that disables Apache Log4J's JNDI Lookup to mitigate CVE-2021-44228 ("Log4Shell"). - winnpixie/log4noshell

Jenkins first automation project. Contribute to acejosephgcp2026-boop/jenkins-pipeline-poc development by creating an account on GitHub.

Advanced Web Vulnerability Scanner is a modular, extensible Python project designed for educational and defensive security purposes. It combines a custom intelligent crawler, passive and active sec...

Defensive web-application vulnerability scanner. Contribute to Hrasvx/lopata development by creating an account on GitHub.

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results. - PortSwigger/turbo-intruder

Simple extension to filter search results per host - marduc812/BurpSuiteHistoryExplorer

Official implementation of SVR-C2, a semantic-validity and execution-receipt aware task reallocation framework for robust decentralized multi-UAV exploration. - yubohann/ECRTA_C2

Threat Actor Profiles. Contribute to dalthunter/intel-reports development by creating an account on GitHub.

You didn't think I'd go and leave the blue team out, right? - Purp1eW0lf/Blue-Team-Notes

Native stdio MCP server for Kali Linux pentesting - 72 typed tools, structured JSON output, engagement session state, Sliver C2, desktop interaction, tunneling. Authorized testing only. - puffert/k...

A box that can be used to reverse malware that contains several unpackers, binary analysis tools, yara signatures etc. - sjuma-sys/PodmanReversingBox

Local-first VAPT orchestration platform. 57 security scanners, encrypted at rest, zero cloud. Built for real pentest engagements. - mrQhere/SecurityManagementPlatform

Ghost Mythic C2 payload type container — builds Ghost implant as EXE, DLL, or shellcode - cuadr0x/ghost-mythic

Joomla RSFiles 未授权文件上传CVE-2026-57827检测&利用脚本. Contribute to jjkk123123/CVE-2026-57827 development by creating an account on GitHub.