Burp Suite 插件：从 Proxy → HTTP History 收集 URL，按主域名分类存储，支持忽略/只保留、过滤与 CSV 导出。适用于 SRC / 渗透测试中的资产与接口梳理。 - jax7sec/url_burp_collect

UnauthScan(未授权访问扫描工具)，基于 Go + Fyne 开发。对目标站点的每个端点依次发送 GET、POST（表单）、POST-JSON 三种探测请求，结合基线对比、误报过滤与漏洞评分，帮助定位可能存在未授权访问风险的接口，并一键导出 HTML 报告。 - zxcvbnmagl/UnauthScan

SevenEngine (PeTechnology v0.0.2): Windows PE malware scanner using ONNX deep model, YARA rules and PE static heuristics. MIT licensed. - max257026-svg/SevenEngine

Demo for SSRF. Contribute to canbenn3/SSRF-Demo development by creating an account on GitHub.

Ruby 4.0 Universal RCE Deserialization Gadget Chain - Draft or TODO - HORKimhab/CVE-RUBY

S2-072（CVE-2026-73633）poc. Contribute to CuteeCat/S2-072 development by creating an account on GitHub.

专注追踪2026最新 iOS Coruna漏洞 及 DarkSword 0day 动向. Contribute to coruna19980101/coruna development by creating an account on GitHub.

C2 framework — C beacon, Python operator listener, Discord bridge, VNC callback, GPS tracking. Full kill chain. Authorized research only. - rainfantry/cheyanne

Python based cybersecurity vulnerability scanner. Contribute to koushik140106/advanced-vulnerability-scanner development by creating an account on GitHub.

CVE-2026-72898 PoC : Metabase Unauthenticated SQL Injection - 4minx/CVE-2026-72898

Modern web UI for Sliver C2 — manage profiles, sessions, listeners, terminals, implants and beacons. - 9Insomnie/sliver_ui

DSH 渗透测试 skills:信息收集+渗透测试工具链(国内场景适配). Contribute to xegeng/dsh-pentest-skills development by creating an account on GitHub.

Contribute to Hunt-Benito/bring-your-own-key-cve-2026-73678-unauthenticated-rce-in-mindsdb-cowork development by creating an account on GitHub.

VulnSniper 是一款面向 SRC（安全应急响应中心）场景的智能漏洞挖掘 Agent。它不追求盲目的大规模扫描，而是像一名经验丰富的狙击手一样——先侦察、再锁定、最后精准扣动扳机。 - rockmelodies/VulnSniper

Chanakya is a Python-based offensive security and reconnaissance framework that brings automated reconnaissance, dork-based discovery, vulnerability scanning, SQL injection and XSS validation, comm...

Automated Python CLI security tool for scanning SQL Injection (SQLi), Cross-Site Scripting (XSS), and exposed directory structures. - AbhishekNarwade/VulnerabilityScanner

Real-Time Vulnerability Correlation Engine for correlating Nmap, Burp Suite, SQLmap, and Wireshark findings into a unified vulnerability report. - Singhdeepak442005/vuln-correlation-engine

Linux kernel privilege-escalation lab exploring CopyFail exploitation, root-cause analysis, behavioral detection, mitigation, and patch validation. Topics: - Denis-Krueger-labs/copy-fail-lab

PoC for CVE-2026-72898. Contribute to VuxNx/CVE-2026-72898 development by creating an account on GitHub.

AegisAV is an experimental, modular antivirus built in Python featuring a multi-layered detection engine (local signatures, YARA rules, MalwareBazaar, and VirusTotal), real-time protection, an encr...

sxwl — High-Performance Web Vulnerability Scanner. Contribute to SentinelXofficial/sxwl development by creating an account on GitHub.