Python-based web application vulnerability scanner using OWASP ZAP, Nmap, and Flask which detects exposed services, insecure headers, and misconfigurations with severity-classified reports. - prana...

Kente Retail order-service: Jenkins CI/CD with a gating Trivy scan and blue-green deploys (CI/CD lab, 'No More 2 A.M. Releases') - josephakayesi/kente-retail-order-service

Go语言开发的高性能文件下载站，提供文件上传、下载、浏览、审核和管理功能，支持基于角色的用户权限控制。 - gomail1/go-download

TGSEC社区 @TGSEC · 擎天柱@Qtzuu 渗透测试工具包 —— 假设驱动的授权红队渗透测试技能框架：15个域 + 状态机攻击链 + 证据账本引擎 - fakedon/Qtzuu-pentest-toolbox

OSCP/OSCP+/OSAI knowledge base + 6 real Docker exploit labs (Log4Shell, Shellshock, Heartbleed, Fastjson, Commons Collections CC6, Shiro-550) - j32ryc/offsec-lab

The ZenShare Suite application is vulnerable by a Reflected Cross-Site Scripting (XSS) vulnerability, affecting web application login and recovery password functionalities. - vEnablee/CVE-2026-30252

A reflected cross-site scripting (XSS) vulnerability in the login_newpwd.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary Javascript in the conte...

Senior-AppSec-style OpenCode skill for auditing and hardening Next.js App Router + React + TypeScript apps — injection, auth, Server Actions, CSRF/SSRF, CSP, and dependency risk. No CAPTCHA, no bli...

This repository contains a sample Java application vulnerable to command injection and server-side request forgery (SSRF). - DataDog/vulnerable-java-application

基于 Vibe Pentest 的增强版本，采用 AI Agent 架构的自动化渗透测试工具。支持多 Agent 并行执行，能够对 Web 应用、API、管理后台等进行全面的黑盒渗透测试，输出稳定可靠的安全报告。 - kabuqin/autovibe_pentest

nuclei-templates-auto. Contribute to fofovicfof-ai/nuclei-templates-auto development by creating an account on GitHub.

Multi-Chain Token Risk & Smart Contract Vulnerability Scanner (Solana & EVM) - tcp-raw/crypto-guard-engine

Image Vulnerability Scanner Github Action. Contribute to Cloudanix/cloudanix-image-scanner-github-action development by creating an account on GitHub.

Contribute to andreich85/nuclei-templates-auto development by creating an account on GitHub.

Burp Suite extension to find hardcoded secrets & hidden endpoints in JavaScript. 150+ detection patterns, active JS fetch, low-noise false-positive filter. Part of TrinetLayer. - trinetlaye...

Supervised detection-engineering pipeline — CAPA/FLOSS/DIE → Claude-drafted YARA-X rule → automated validation → human accept/reject gate. Includes a full malware analysis Detection Story. - mikepe...

Centralized technical vault for IW Cyber Ops. Deep research documentation covering OS Internals, Reverse Engineering, Binary Exploitation, Fuzzing, and 0-Day Methodologies. The digital brain. 🧠 - i...

短信钓鱼（Smishing）内部安全意识演练与追踪平台 · Flask + SQLite 单文件 · 多通道发送 / 唯一令牌点击归因 / 实时看板 - baohuiking/SmishingDrill

It's a CVE-2021-3493 Exploit written in C. Contribute to r3dw4n48m3d/CVE-2021-3493-Exploit development by creating an account on GitHub.

面向已授权渗透测试 / CTF / 靶场场景的 SQL 注入验证与取证 AI Skill，将测试固化为低噪声、证据化、可复核的六环节流程。 - JiuZero/90sqli-skills