AppDump 目前修复闪退 有砸壳和自签软件提取功能 此为通用版测试，若重启闪退请立即删除‼️ 利用的 DarksWord 漏洞 故只支持 iOS17-18.7.1 iOS26-26.0.1 A19 和 M5 芯 - yAngbin1108/Decrypt-FairPlay

识渔计划 · 反钓鱼攻防训练营 —— 第十四届全国大学生数字媒体科技作品及创意竞赛参赛作品（移动与网络应用开发赛道）。纯前端 H5 反钓鱼攻防训练游戏。 - BBTTCC123/shiyu-anti-phishing-trainer

Modular Python CLI vulnerability scanner: port scan, banners, security headers, CVE lookup, tech detection, SSL info. - euphoric-habromaniac/vulnerability-scanner

Paste URL ✓ Validate URL ✓ Analyze source ✓ Show metadata ✓ Show genuinely available formats ✓ Start authorized download ✓ Display progress ✓ Generate temporary signed download URL ✓ Track job stat...

A web vulnerability scanner based on OWASP Top 10 vulnerabilities. Helps identify common security vulnerabilities in web applications. - gocar112/owasp-vulnerability-scanner

AI 自主渗透测试系统（Go 后端 + Next.js 前端）：多智能体驱动的自动化安全测试与漏洞挖掘平台 - hackliu/ARTEX

WAS500: HTML/CSS/JS labs with web security lessons (XSS via innerHTML, client-side validation bypass) - rabbiaman03/was500-web-app-security

ZeroDay Lab 웹 취약점 워게임 문제 모음 (SQLi · Command Injection · CSRF · XSS · SSRF, Docker) - ZeroDayLab-capstone/Vulnerability-Analysis

CVE-2026-40224: systemd-machined local privilege escalation - 0xparad0x/Exploit-CVE-2026-40224

一套自研的 C2 ，用于授权渗透测试与红队评估。服务端为单文件静态二进制，内嵌 Web 控制台，Windows / Linux 双平台可用，零外部依赖。（linux版和windows版在Releases） - mouren101/GRC

The Missing Diya — a Diwali-themed UNI6CTF web exploitation challenge featuring reflected XSS. - RITHISH2402/Missing-Diya

Nuclei and Nmap NSE checks for wscan. Contribute to krolchonok/wscan-templates development by creating an account on GitHub.

Contribute to hlaas/devbank-xss-poc development by creating an account on GitHub.

Multiplatform reliable implant with failover protocols - jmpsec/stanza-c2

POC: atacando una app vulnerable antes y despues de poner un WAF (Aegis) — SQLi, XSS, path traversal - safernandez666/waf-poc

Security research PoC. Authorized testing only. Contribute to kashishtopi/blinko-plugin-path-traversal-rce development by creating an account on GitHub.

Full-stack Uptime Monitoring & Status Page platform featuring non-blocking WebClient engine, SSRF protection, Recharts analytics, and Google OAuth2. - Hassan-Nfissi/PulseWatch

Security research PoC. Authorized testing only. Contribute to kashishtopi/hyperdx-clickhouse-proxy-ssrf development by creating an account on GitHub.

Security research PoC. Authorized testing only. Contribute to kashishtopi/cronicle-docker-hardcoded-secret-key-rce development by creating an account on GitHub.

Contribute to Nisarga-Astakar/Web-Vulnerability-Scanner development by creating an account on GitHub.

Live Linux threat hunting for incident responders: fileless implants, injected code, rootkits, stealthy persistence, webshells and backdoor sockets. Static Rust binary, YARA, MITRE ATT&CK m...