Memory forensics automation — process analysis, injection detection, YARA scanning, IOC extraction with STIX 2.1 export. Works standalone or with Volatility3. - joemunene-by/ghostforensics

Open-source malware analysis sandbox with Docker/QEMU execution, telemetry, YARA, Suricata, threat-intel enrichment, and AI reports. - allsmog/detonate

Orchestra is the most advanced C2 framework in development. Features are beta and final version will be available commercially only to approved candidates. - t-h-i-n-k-er/orchestra

WebStrike — automated web-pentesting framework that orchestrates Kali tools (subfinder, httpx, katana, ffuf, nuclei, sqlmap, dalfox) into one phased recon→exploit→report pipeline. - FlinnZee/webstr...

An advanced Out-of-Band and In-Band SSRF fuzzing scanner with dynamic request tracking. - R0X4R/ressrf

5-layer offensive & defensive security toolkit: API scanner + payload injection (SQLi/XSS/JWT/PathTrav/SSRF) + network recon + AI prompt injection/red-team engine. Built on CL4R1T4S (29.5k ...

Reproducible Stuxnet malware-analysis lab with static and dynamic workflows, YARA/Sigma detections, and safety-first documentation. - allsmog/mlw-lab

pentesting tool to bypass captcha Steam, Gmail, Instagram, Facebook, Twitter, Snapchat, Outlook, Netflix, Adobe Bot Automation - SeseyqOw/Captcha-Bypass-Tool

🔐 Atithi-Attacker — XSS-based cookie hijacking lab demonstrating session theft through stored XSS vulnerabilities. Frontend (HTML/JS) + Backend (PHP) with real-time stolen cookie dashboard. - Tarik...

Python web vulnerability scanner detecting SQL injection, XSS, open redirects, and security misconfigurations. Multithreaded directory enumeration across 40+ sensitive paths. Generates color-coded ...

【Java计算机毕业设计分享】基于Python的漏洞挖掘系统，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - sandhyaman/msYqTsaPRp

CVE-2026-22356: Jetpack CRM Path Traversal Vulnerability and RCE - xxconi/CVE-2026-22356

ReTrishul – Burp Suite extension for active XSS, SQLi & SSTI detection. Intercepts in‑scope requests, injects payloads into GET/POST/JSON params, analyses responses. Results in a dedicated ...

Contribute to niekaicheng/CVE-2026-42945_NGINX_Rift development by creating an account on GitHub.

HTTP/2 Bomb (CVE-2026-49975) non-destructive vulnerability detector for Nginx / Apache httpd. Zero-dependency Python. - adminlove520/http2-bomb-detector

An intelligent Website Vulnerability Scanner developed using Python Flask that analyzes HTTPS implementation, security headers, cookie security, and website risk posture to generate security scores...