Burp Suite extension to detect missing OWASP security headers - ismailsanan/SecHeaderScout

PoC for modelscan GGUF detection bypass (CVE-worthy RCE via mmap-based pickle injection) - jasonmiao0511-hue/modelscan-gguf-bypass-poc

PoC for modelscan NumPy .npz detection bypass (CVE-worthy RCE via pickle in np.load allow_pickle=True) - jasonmiao0511-hue/modelscan-npz-bypass-poc

A Sliver C2 module for NetExec. Contribute to moerketh/sliver-netexec-module development by creating an account on GitHub.

A hands-on web application penetration testing lab using OWASP Juice Shop, Docker, OWASP ZAP and Burp Suite. The project includes manual testing, OWASP Top 10 mapping, CVSS-based risk rating and mi...

Open detection coverage (YARA, Sigma, KQL) and IOCs for malware campaigns analyzed on meltedinhex.com - meltedinhex/detections

AI-powered automated vulnerability scanner with scalable architecture (FastAPI, Celery, ML service) - PallaviVasanth/vuln-scanner-pro

A web-based vulnerability scanner that detects open ports, weak configurations, outdated software versions, and generates vulnerability reports. - Padmini2007/Vulnerability_Scanner

Authenticated HTTP/REST client as fledge http, with SSRF guards. Complements fledge-plugin-web. - CorvidLabs/fledge-plugin-http

Crystal Palace Kit, Sleep Mask Kit, and Loader Kit for Sliver C2 - panwnvda/Sliver-Evasion-Suite

A web hacking challenge focused on DOM-based XSS vulnerabilities. - nijeychoi/ask-and-learn

drop-in RCE framework given an arbitrary r/w primitive - w0ot-net/ghostscript_exploitation_library

All-Bug-Bounty-Payloads/ ├── README.md ├── DISCLAIMER.md ├── CONTRIBUTING.md ├── ROADMAP.md ├── payload-index.md ├── api-security/ ├── graphql/ ├── jwt/ ├── oauth-oidc/ ├── cors/ ├── xss/ ├── dom-...

CodeGuardian - 轻量级代码安全扫描工具，零配置开箱即用。支持安全漏洞检测、敏感信息扫描、代码质量评估，生成 Terminal/JSON/HTML/SARIF 多格式报告。 - gitstq/CodeGuardian-Scanner

Four-kit defense evasion suite for Sliver C2: Crystal Palace loader, sleep masking, in-memory PE execution, and remote process injection with PPID spoofing. - panwnvda/SliverC2-Evasion-Suite

【Python计算机毕业设计分享】基于Python的漏洞扫描系统，MySQL Python开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - rayabeciga/YxBVdfbJzI

CVE-2026-5513 — Bookly ≤ 27.2 Stored XSS via Cookie - 87achrafg-stack/CVE-2026-5513

💀 JOCK-JACKER - Advanced Offensive Security Framework. Network discovery, LLMNR poisoning, Kerberoasting, NTLM relay, Golden Ticket forgery, EDR bypass, persistence matrix, multi-protocol C2, and a...

Turn a CVE into Sigma/Nuclei detection-rule skeletons and a repro scaffold - mstampfli/cve2detect

AI-augmented in-browser Burp Suite: intercept, scan, fuzz & agent-test web traffic with the DeepSeek API (Chrome/Edge extension). Authorized testing only. - Ishan-Nim/ai-intruder-pro

Cross-pod AS2 notification + LDN inbox helper for Solid apps (SSRF-hardened, DNS-pinned). Extracted from the Pod Manager. - jeswr/solid-agent-notify