Contribute to alsaeyd-alakhras/yara.alhaddad development by creating an account on GitHub.

AI-powered Burp Suite extension for automated web app penetration testing. DeepSeek-driven payload generation, vulnerability detection (SQLi, XSS, SSRF, SSTI, XXE, RCE), scope-aware traffic capture...

Nuclei POC，每日更新. Contribute to ahisec/nuclei_poc_1 development by creating an account on GitHub.

Burp Suite Montoya extension + Python CLI for automated proxy traffic coloring, history querying, and Repeater staging - Narmi45/BurpBridge

Hybrid static + dynamic web vulnerability scanner - SQLi, XSS, CMDi, path traversal, IDOR, misconfig. CLI + Streamlit. Master's thesis project. - moadh704/webvulnscanner

Contribute to K0NGR3SS/cve-signal development by creating an account on GitHub.

AI-powered web application vulnerability scanner: crawl, 21-category rule detection, AI false-positive reduction, PDF/Markdown reports - illupak/ai-vuln-scanner

A Python-based mini vulnerability scanner for authorized network and web security assessments. - uzair-hidayath-khan/Mini-Vulnerability-Scanner

Contribute to Jaybee124/YARA-malware-Lab development by creating an account on GitHub.

Contribute to jashwanth0726/web-vulnerability-scanner development by creating an account on GitHub.

This tool would inject 3000 lines of reflected cross site scripting payloads and find a way to at least get 1 working and has built in coded ai support for assistance - Micatob/Xss-Scanner

Basic web vulnerability scanner for educational purposes - CyberPhantom87/web-vuln-scanner-

Web access skills for Prime Agent: multi-backend search (Gemini grounding, Tavily, Brave, Serper, Exa, SearXNG, DuckDuckGo) and SSRF-guarded page fetching with HTML-to-markdown and PDF extraction -...

a walkthrough of all six levels of flaws.cloud — aws s3, ebs, imds and iam misconfigurations, and how they chain into a full account compromise - Elnimo-00/cloud-infra-pentest

Proof-of-concept for CVE-2026-18315 (TrueBooker WordPress Plugin): Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover - nastar-id/CVE-2026-18315-PoC

Autogenerate YARA rules from collections of similar files - jhumble/sigmaker

A modular Web Application Vulnerability Scanner built with Python. Features HTTP header analysis, directory fuzzing, custom payload injection for SQLi/XSS detection, and automated reporting. Design...

The project studies how antivirus engines detect shellcode and develops obfuscation techniques to evade them, then measures how successfully these modified payloads bypass detection in an isolated ...

Fileless shellcode dropper in C++ using WinINet API. Downloads and executes shellcode in-memory without touching disk. Educational purposes only. - Segaotava/havoc-fileless-dropper

CVE-2026-18366: Events Manager < 7.4.1 — Unauthenticated Privilege Escalation to Administrator. Write-up and proof-of-concept (poc7.py). - ghostpels/CVE-2026-18366

Lightweight C2 agent simulation framework for red team adversary emulation & offensive security research. Demonstrates basic C2 callback patterns for SOC monitoring, custom TCP packet frami...