Automated penetration testing application — scans targets with Nmap and Nuclei, classifies vulnerabilities, and generates professional remediation reports - raviyadav15/AutoPentest-MVP

Cross-Site Scripting (XSS) Vulnerability Scanner with WAF evasion, web crawler, comprehensive payload database, CLI and REST API - anuptilekar86/xss-scanner

Automated YARA rule generation from natural language using RAG pipelines and local LLMs - Abderrahmane381/yara-rag-intelligent-system

基于 MCP 协议的安全工具 Server，让 AI（Claude Code / Cursor）直接调用 nmap、nuclei、subfinder 进行端口扫描、漏洞扫描、子域名枚举和 WAF 检测。(本工具仅用于授权的安全测试、教育和研究目的。使用本工具扫描未授权的目标可能违反相关法律法规。使用者须自行承担所有责任，作者不对任何滥用或非法使用负责) - Requiem233-byte/s...

Burp Suite extension that automates dynamic HTTP parameter extraction and token refresh, helping security testers maintain valid requests during testing. - 0xx01/ParamRotator-Dynamic-Parameter-Auto...

Sentinel is an AI-powered cyber threat intelligence platform for SOC analysts. It provides real-time threat monitoring, AI-based SQL injection and XSS detection, and security analytics. Built with ...

A PHP & MySQL-based survey web application developed for educational cybersecurity analysis. It demonstrates dynamic survey management along with simulated security vulnerabilities (XSS, CS...

Blind XSS detection built on interact.sh — per-field tokenized payloads, injection-point↔vulnerable-URL correlation, screenshot/DOM capture, and a persistent-session reverse proxy. Authorized testi...

CVE-2026-19195 Proof of Concept. Contribute to patrickt2017/CVE-2026-19195-PoC development by creating an account on GitHub.

CVE-2026-19193 Proof of Concept. Contribute to patrickt2017/CVE-2026-19193-PoC development by creating an account on GitHub.

Automated Web Application Vulnerability Scanner with Multithreading, YAML Templates, Security Headers Audit, and PDF Report Generation. - ahmed-web229/ahm-web-scanner

一个专治运营人「PRD 写得挺顺，上线才发现是坑」的背锅体质。粘贴规则文本，一键生成结构化排雷报告。羊毛党红点预警：像羊毛党一样思考，把可被机器刷量、用户套利的漏洞逐条揪出来，按风险等级排序。用户歧义大赏：以「小白视角」重写规则并与原版逐条对比，高亮那些注定被误解的措辞。客诉预演：提前模拟评论区最犀利的三条吐槽，并附上应对话术。角色扮演扫描：AI 分饰「最坏的用户」与「最杠的客服」，从攻防两...

Distributed webhook delivery service in Java 21 / Spring Boot 3. At-least-once delivery with a Redis reliable queue, jittered exponential-backoff retries, dead-letter queue, HMAC-SHA256 signing, an...

Reference implementations of the patterns I rely on in production: Solana transaction sending and confirmation, SSRF-safe URL handling, and environment/secret loading. - cryptothud/engineering-patt...

A simple Python-based Vulnerability Scanner that detects common open ports, identifies basic security risks, and generates a vulnerability report. This mini project helps beginners understand netwo...

Contribute to zhaguiya/burp-decrypt-tab development by creating an account on GitHub.

Analysis of QUIETVAULT (nx/s1ngularity, Aug 2025) — malware that hijacks the victim's own AI coding agents to find their secrets. Validated YARA/Sigma/KQL, a detonation harness, and evidenc...

Contribute to QAdversif/AegisPanel development by creating an account on GitHub.

freemarker SSTI 命令执行/混淆/文件写入，以及jmreport组件利用payload生成 - Mr-xn/fmfuzz_tool

XSS2Shell ULTIMATE v3.0** is a powerful exploitation tool that chains **Cross-Site Scripting (XSS)** vulnerabilities in **WordPress** to achieve **Remote Code Execution (RCE)**. This tool exploits ...

Triage and forensic analysis of a high-severity network alert indicating a Lumma Stealer infection. This investigation covers identifying the compromised internal asset, mapping its Active Director...