本系统基于 **Windows + WSL (Kali Linux)** 双环境搭建，是一套整合多类AI安全工具的一体化渗透测试平台。系统将大语言模型能力与传统渗透测试工具深度结合，覆盖Web安全、内网攻防、二进制逆向、API测试、流量分析等多个安全领域，可实现渗透测试全流程的智能化、自动化提效。 - xk11z/plutoxAI

Authorized vulnerability scanner with safe probes, findings lifecycle, and reporting - Skulll23/04-vulnerability-scanner

Curated collection of working Proof-of-Concept (PoC) exploits for known CVEs. Includes references to public PoCs and original exploit scripts. For educational and authorized security testing purpos...

Authorized Stored XSS vulnerability assessment performed in the PortSwigger Web Security Academy laboratory. - ThanviShetty474/stored-xss-vulnerability-assessment

YellowKey BitLocker CVE-2026-45585 - free BitLocker recovery key extractor and vulnerability tool. Bitlocker yellowkey, yellowkey bitlocker, yellowkey github, cve-2026-45585, yellowkey vulnerabilit...

CVE-2026-24061's poc. Contribute to 0p5cur/CVE-2026-62737-POC development by creating an account on GitHub.

Python web app vulnerability scanner — crawls a site with requests/BeautifulSoup and automatically tests for SQL injection, reflected XSS, and broken authentication, with optional OWASP ZAP integra...

Contribute to Pratham-crtl/Vulnerability-Scanner development by creating an account on GitHub.

Contribute to igorpyan/burp-ext-param-fuzzer development by creating an account on GitHub.

YellowKey BitLocker CVE-2026-45585 - free BitLocker recovery key extractor and vulnerability tool. Bitlocker yellowkey, yellowkey bitlocker, yellowkey github, cve-2026-45585, yellowkey vulnerabilit...

Jailbreak supported Google Pixel phones with CVE-2026-43499 - alex193a/Root-My-Pixel

A Rust-based tool for staged remote process injection via IPC orchestration in Windows. It bypasses EDR flagging and avoids noisy shellcode by separating the dormant stager (pipe server) from the e...

Free open-source IP rotation proxy (SOCKS5/HTTP) + Burp extension for people without money - BlasterX24/ip-rotator-free

这是一个面向多项目维护者的自动化工具，旨在自动处理 Dependabot 和 Code Scanning 产生的大量简单、重复的告警修复工作，如依赖版本升级、安全漏洞修复等，从而显著提升维护效率。 - dependfix/dependfix

Generate YARA rules from Windows API hashes for malware detection and hunting. - tbarabosch/apihash_to_yara

CVE-2025-5781 FreePBX Exploit POC. Contribute to jasonbernier/CVE-2025-5781 development by creating an account on GitHub.

Local-first, modular static malware scanner: YARA, PE/JAR/APK/Office/PDF analysis, safe archive extraction, explainable verdicts, optional hash reputation lookups. - trashdino0/malware-scanner

POC FastAPI librariy application in a Jenkins pipeline to illustrate secured CI/CD, rollback and run-time persistence. - kekcoke/pykins

Tenant isolation, replay protection, signature verification, path traversal, SSRF, redaction, and CI supply-chain boundary tests. - messaging-intel-test/security-boundary-tests

Contribute to 0xSt4rk007/ssrf development by creating an account on GitHub.