RaceTrackLab 是一个用于学习和演示高并发环境下竞态条件（Race Condition）漏洞的靶场平台。通过模拟真实的并发场景，帮助开发者理解并发安全的重要性。 - GitHubNull/raceTrackLab

Python-based OWASP-inspired web vulnerability scanner with automated detection, reporting, and vulnerable testing labs. - RevantVishwakarma/wvscan

Contribute to SheezaAlam/Malware-Detection-using-YARA-Vulnerability-Research development by creating an account on GitHub.

0-click XSS (CWE-79) in Mozilla Pocket Android v8.33.0.0 via unsanitized $(document.body).html(content) in articleview-mobile.js. Background service triggers execution without user interaction. Jav...

🛡️ Machine Learning-Based XSS Honeypot | 🤖 Hybrid ML + Keyword/Regex Detection | 🔍 Reflected & Stored XSS Detection | 📊 Attack Monitoring & Threat Analysis | 🔐 Cybersecurity Researc...

Anaguma is a tool capable of exploiting code cave in binaries in order to inject shellcode. - Plunder283/anaguma

A modern, console-based web penetration testing toolkit with a TUI. Features an HTTP/HTTPS proxy, active/passive vulnerability scanner, Repeater, Intruder, Spider, and more. Free & open-sou...

Automated Vulnerability Scanner based on OSINT. Contribute to BreachQuery/bugquery development by creating an account on GitHub.

A Python-based network vulnerability scanner for authorized TCP port assessments, service identification, local exposure findings, and JSON/CSV reporting. - TaBongs/network-vulnerability-scanner

A Go CLI dependency vulnerability scanner with CVSS scoring for Python, Node, and Go. - mjsandagi/vulture

Open source orchestrator for malware scanners on shared hosting (cPanel, no root). Weighted consensus across engines, reversible quarantine, embedded web panel. - thiagoluga/SentinelHost

Automated penetration testing application — scans targets with Nmap and Nuclei, classifies vulnerabilities, and generates professional remediation reports - raviyadav15/AutoPentest-MVP

Cross-Site Scripting (XSS) Vulnerability Scanner with WAF evasion, web crawler, comprehensive payload database, CLI and REST API - anuptilekar86/xss-scanner

Automated YARA rule generation from natural language using RAG pipelines and local LLMs - Abderrahmane381/yara-rag-intelligent-system

基于 MCP 协议的安全工具 Server，让 AI（Claude Code / Cursor）直接调用 nmap、nuclei、subfinder 进行端口扫描、漏洞扫描、子域名枚举和 WAF 检测。(本工具仅用于授权的安全测试、教育和研究目的。使用本工具扫描未授权的目标可能违反相关法律法规。使用者须自行承担所有责任，作者不对任何滥用或非法使用负责) - Requiem233-byte/s...

Burp Suite extension that automates dynamic HTTP parameter extraction and token refresh, helping security testers maintain valid requests during testing. - 0xx01/ParamRotator-Dynamic-Parameter-Auto...

Sentinel is an AI-powered cyber threat intelligence platform for SOC analysts. It provides real-time threat monitoring, AI-based SQL injection and XSS detection, and security analytics. Built with ...

A PHP & MySQL-based survey web application developed for educational cybersecurity analysis. It demonstrates dynamic survey management along with simulated security vulnerabilities (XSS, CS...

Blind XSS detection built on interact.sh — per-field tokenized payloads, injection-point↔vulnerable-URL correlation, screenshot/DOM capture, and a persistent-session reverse proxy. Authorized testi...

CVE-2026-19195 Proof of Concept. Contribute to patrickt2017/CVE-2026-19195-PoC development by creating an account on GitHub.

CVE-2026-19193 Proof of Concept. Contribute to patrickt2017/CVE-2026-19193-PoC development by creating an account on GitHub.