Independent reconstruction, lab validation, and PoC for CVE-2026-9198, the Langflow unauthenticated RCE (fixed in 1.10.1) - Riftweld/langflow-cve-2026-9198

A Python-based Government Website Vulnerability Scanner that checks security headers and cookie protections, identifies missing configurations, recommends fixes, and generates HTML and JSON reports...

Proof of concept and isolated Docker lab for CVE-2026-103889, an unauthenticated RCE vulnerability in Expivi 3D Product Configurator for WooCommerce ≤ 2.16.2. - kayes817/CVE-2026-103889

Prometheus v3.15.0 - High - Remote - SSRF - http_sd __unix_socket__ unsanitized Dial leftover of UDS scrape - abraxas/prometheus-unix-socket-dial

Detects SQLi, XSS, CSRF, SSRF and directory traversal, then emits PDF and JSON reports with remediation guidance. Benchmarked against Burp Suite and OWASP ZAP. - ATHARVASAIL/WebGaurd

For new CVEs without existing/working/non-mangled POCs - fromABUV/CVE-2026-9586_POC_EXPLOIT

初步学习AI安全项目：检测URL是否为钓鱼网站. Contribute to van0821/Initial-Phishing-URL-detection development by creating an account on GitHub.

Hephaestus 是集资产收集、攻击面评估、漏洞验证与 AI 渗透对话于一体的安全测试平台。提供 Web 服务、桌面客户端及独立扫描 Agent，支持本机扫描、组合任务和分布式节点执行。 - qiwentaidi/Hephaestus

Raw TCP toolkit: loopback SOCKS5 relay engine + Burp Suite extension (intercept, history, repeater) - siberfaqih/burp-tcp

Open-source AI-powered web security testing proxy — a free Burp Suite alternative with a built-in Claude security agent. Intercept, repeat, fuzz and audit HTTP/HTTPS & WebSocket traffic. - ...

OWASP Top10 Web漏洞复现项目，包含Pikachu、Upload-labs靶场实验报告. Contribute to yuechu-123/Web-Vuln-Lab development by creating an account on GitHub.

Scan, clean, harden, back up and monitor hacked WordPress sites with wp-cli: signature/YARA/behavior scanning, reversible quarantine, encrypted backups, file-integrity watch - arian24b/wpguard

Contribute to nullkitsunedev/Lfi-Nuclei-Temp development by creating an account on GitHub.

Automated static triage for malware analysis — hashes, strings, IOC extraction, PE parsing and YARA scanning. Static only; never executes samples. - malwarelens/malware-triage-toolkit

ATT&CK 渗透测试实验复现：从外网信息收集到内网域控完全控制. Contribute to zwenn66/ATTACK-Pentest-Lab development by creating an account on GitHub.

DeepSeek Harness 红队行动记录与渗透测试模式：授权范围内的 engagement 记录（目标→意图→证据→事实→漏洞→资产）、跨会话历史、8 种报告格式与交互式 Web 可视化 - chongfenglaosiji/dsh-redops

A Flask-based vulnerability scanner with risk analysis and PDF reporting - prajwalk-sec/Cybersecurity-Vulnerability-Scanner

A managed malware scanning engine and Windows WPF security application built with C# and .NET 8, supporting ClamAV-style signatures, archive/document scanning, database updates, and quarantine. - k...

MCP tool + CLI: identify a file and decide whether opening it is dangerous. Catches pickle/torch RCE payloads, Keras Lambda bytecode, zip-slip entries. - Aitrendova/filescan-mcp

Prompt injection vulnerability scanner for AI chatbots: runs an attack library against a chatbot, scores the results on a React dashboard, and demos before/after defenses. - HimanshiDurgapal02/Prom...