Burp Suite extension for SSRF testing with configurable out-of-band (OOB) callbacks — injects canary payloads into headers, query/body/JSON parameters, and logs every request. - DouglasRao/SSRF-Probe

Authorization matrix testing with IDOR detection for Burp Suite - Gconfig/BOLAMatrix-Public-Release

Local, offline antivirus scanner for Windows — hash blocklist, YARA rules and PE/script heuristics, with a security-operations UI. - trentdiko/AVSCAN

依据系统架构设计方案，ReatiWire 是专为 20 人高保密、高频研发小团队打造的私有安全协同工作台与研发直连网关。系统深度融合用户态 WireGuard 协议栈 (tsnet)、私有 DERP 快速熔断降级引擎、LiveKit SFU 选择性转发单元以及本地用户态 SOCKS5 代理网关，实现全链路零驱动提权、1v1 数据面物理零流量与 100M 公网 VPS 带宽确定性受控。 - T...

Burp Suite extension that renders PDF HTTP responses inline using the PyMuPDF (MuPDF) engine — page navigation, thumbnails, zoom, metadata and one-click download. - DouglasRao/Better-PDF-Viewer

A mini vulnerability scanner that detects open ports, identifies outdated software via banner grabbing, flags weak configurations, and generates a report. Built to learn penetration testing &am...

Automated Web Vulnerability Scanner - Community Edition. 22 checks: SQLi, XSS, Command Injection, LFI, Open Redirect, security headers & more. One URL in, full report out. - hacked-oss/BUG_...

This example demonstrates a Server-Side Request Forgery (SSRF) vulnerability using a simple Flask web application. It simulates a server endpoint that fetches content from a user-provided URL witho...

Full-stack network perimeter auditor and vulnerability scanner built with Node.js, TypeScript, and React. Features native TCP socket probing, SSRF defense filters, HTTP security header analysis, an...

CI/CD Jenkins Pipeline. Contribute to vaishnavi24-hyd/devops_exp_5 development by creating an account on GitHub.

一款经典报纸复古风 Typecho 主题，内置文章点赞、阅读量统计、目录树、模态框搜索、跟随系统主题色、归档 / 友链 / 标签云三大独立页面模板，支持瀑布流加载、图片灯箱、代码高亮复制。性能上实现懒加载、内容缓存、数据库优化；安全上配备 CSP、HSTS、XSS 防护与接口速率限制。适配 PHP 8 与 Typecho 1.3.0+，全站响应式布局。 - muzihome/LanternP...

APIShield is a real-time API security platform that detects and blocks threats such as SQL injection, XSS, and command injection. It provides risk analysis, request monitoring, and automatic threat...

Advanced Telegram Bot for iVasms Real-Time Traffic Streaming, Multi-Provider OTP Management & Cloudflare Bypass - hsh34811-hash/ivasms-live-traffic-bot-2026

近六年重要提权漏洞集合 (2019-2025) - Privilege Escalation CVE Collection - hexbay/privilege-escalation-cve-collection

轻量化红队协同渗透测试平台。. Contribute to guaidao2/MuLun-RedTeam-Collaboration-Platform development by creating an account on GitHub.

A Go Client library for interacting with the Nessus vulnerability scanner API - tencat-dev/nessus-client-go

Web vulnerability scanner built with Java & Spring Boot. Detects SQLi, XSS, CSRF, and security misconfigurations. Generates PDF reports with risk scores and remediation guidance. - Vaibhavs...

Automated web vulnerability scanner with SQLi/XSS detection, exploitation, and reporting - Suhani34/Pentest-Platform

基于多智能体架构与自主决策机制，配合大语言模型的理解能力，输入自然语言指令，AI 自动完成从目标侦察到漏洞验证的完整渗透测试流程。 - Tangruwo/RuwoScan