Black-box web application penetration test on DVWA — SQL Injection, XSS, Brute Force | Kali Linux | OWASP Top 10 | CVSS Rated Report - TanayaNnkar/Web-App-Pentest-DVWA

Automated AWS S3 vulnerability scanner and executive report generator. - ertunckilic/EphemerSec-AWS-Scanner

⚡ scan3l - Ultimate Bug Bounty Recon & Vulnerability Scanner ⚡ - imostafaa7/scan3l

Common SOAR playbook templates. Contribute to ClockworkZMP/soar-playbook-templates development by creating an account on GitHub.

Adversary Hunter is a free-to-use-community-driven IOC feed that uses Shodan searches to collect IP addresses of known malware/botnet/C2 infrastructure. - cybersheepdog/Adversary-Hunter

Fast, free, accurate npm dependency vulnerability scanner — local + CI/CD, powered by OSV.dev - lockhawk/lockhawk

👁️⚖️ MaatEye — The Eternal Guardian of Smart Contracts. Automated vulnerability scanner for Ethereum contracts with 20+ detection patterns. Whitehat reconnaissance for the community. - Lord1Egypt/M...

AI-powered vulnerability scanner — AST analysis, pattern detection, dependency CVE checking, SARIF output for GitHub Security - Koushikgaini/VulnGPT

Burp Autorize plugin for pwnproxy. Contribute to stacksparrow4/autorize development by creating an account on GitHub.

Application in C that encodes and decodes shellcode obfuscated as IPv6 address strings at runtime and executes it in memory to evade static AV detection. - N-O-USER/IPv6-Decryption

Detection scripts, patch checker & hardening guide for CVE-2026-44963 (Veeam B&R RCE) - SentinelXofficial/CVE-2026-44963

Redis 主从复制攻击 (Rogue Redis / Replication RCE) 学习项目 — 原理研究 + Docker 测试环境 + 自研利用 + 实测 (仅供安全研究) - ly-test-fuzz/redis-replication-rce-lab

OWASP Top 10 漏洞手动复现与分析. Contribute to yugez397-hue/OWASP-Top10-Vulnerability-Lab development by creating an account on GitHub.

A Python-based vulnerability scanner that checks common ports and identifies basic website security risks. - parijatguha-cell/Web_Vulnerability_Scanners

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices - future-architect/vuls

CVE-2026-38165 (SSTI). Contribute to AT190510-Cuong/CVE-2026-38165-SSTI- development by creating an account on GitHub.

Burp Suite extension + port-based highlighter: dedupes HTTP history into a live unique-request feed and color-codes attacker/victim traffic by listener port (PwnFox-style) — built for Android/iOS m...

Burp Suite XML流量分析工具，自动识别漏洞优先级. Contribute to Asnavshino/-_BP- development by creating an account on GitHub.

Automated 11-stage bug bounty recon pipeline: subdomains, live hosts, ports, cloud assets, endpoints, params, nuclei, bruteforce, 403 bypass, takeover detection & HTML reports - onlyv4ns/rikontol

Offline, explainable malware scanner for any file on any OS (static + heuristic + YARA) - subashjaganathan/hawkscan

Intentionally vulnerable GCP infrastructure for security training — Terraform deployment of DVWA, Cloud Function (SSRF/RCE), public storage bucket, overprivileged SA, and more. - anpa1200/vulnerabl...