Asynchronous web vulnerability scanner integrating Nmap reconnaissance with Google Gemini AI for automated threat remediation, Redis background task workers, JWT auth, and Streamlit UI. - Abdullah-...

XSS Param Finder — injects marker payloads into URL params, flags unescaped reflections as reflected-XSS candidates (manual browser verification required). - toradesourav/Xss-param-Finder-

An open-source Burp Suite extension that turns already captured, in-scope Site Map traffic into a privacy-conscious research package for a local Codex agent. It helps an authorized researcher map t...

2022信息安全毕设一套 面向安全开发流程的漏洞扫描器设计与实现（论文+程序源代码）降重后.zip. Contribute to fireditoo/TpsWDmKT development by creating an account on GitHub.

compose upstream SSRF test. Contribute to sashabal/c3-ssrf-poc development by creating an account on GitHub.

ZooKeeper 未授权访问漏洞（CVE-2014-085）PoC 及靶场. Contribute to ehaoxiongdiycw/CVE-2014-085 development by creating an account on GitHub.

Contribute to Refaat1/XSS-poc development by creating an account on GitHub.

Contribute to mohamedjawady/CVE-2026-53613-poc development by creating an account on GitHub.

CVE-2026-19632 - TranslatePress One-Day PoC. Contribute to YonLiud/CVE-2026-19632 development by creating an account on GitHub.

Contribute to HackfutSecRoot/multi_exploit_wp development by creating an account on GitHub.

An open-source Burp Suite extension that turns already captured, in-scope Site Map traffic into a privacy-conscious research package for a local Codex agent. It helps an authorized researcher map t...

COS AgentOps X-Ray + Promotion Gate POC. Contribute to yifatur-pixel/cos-agentops-xray-poc development by creating an account on GitHub.

End-to-end Docker lab reproducing Apache log4j2 #4255 — FilteredObjectInputStream allowlist bypass via java.rmi.MarshalledObject (unfiltered deserialization → RCE) on Log4j 2.26.1 / JDK 17. - dinos...

Custom Sysmon configuration built to detect a simulated 6-stage attack chain — credential dumping, ransomware file drops, persistence, and C2 activity. - gowtham526/Endpoint-Detection-and-Response-Lab

Cloud-native C2 framework using cloud storage as dead-drop communication channel - LAME-Projects/stratum-c2

FFind — self-hosted static malware analysis for analyst-reviewed YARA and Falcon LogScale detection content - Forrof/FFind

Remote Code Execution Engine with Spring Boot & Docker - anshullakra007/Distributed-Code-Execution-Engine

Contribute to rajbhadrannavar17/Burp-Extension development by creating an account on GitHub.

Passive surface-security scanner for web apps — enter a URL, get a security grade mapped to the Agent Security Playbook. SSRF-guarded, nothing stored. - MohammedAl-Alimi/is-my-app-safe