Swagger UI API XSS poc. Contribute to B6G-K1LLER/SwaggerUI-DOMPurify-Bypass development by creating an account on GitHub.

一个给 AI 智能体使用的本地文档读取技能包。它会把 PDF、扫描 PDF、DOCX、PPTX、XLSX、旧版 Office、图文混排报告、审计材料、漏洞报告等文件解析成智能体容易阅读和追溯的产物：`document.md`、`document.json`、页面图、嵌入图片、表格和 `verification.md`。 - huohuo-huo/document-reader

Contribute to D0Tx8FF/yara-rules development by creating an account on GitHub.

Advanced Burp Suite extension that pinpoints the exact cookie(s)/header(s) maintaining a session, with OR-group & minimal-combination detection and send-to-Repeater. - r04i7/burp-session-to...

Check if a CVE has a Nuclei detection template in projectdiscovery/nuclei-templates - VixianSchool/nuclei-cve-check

Contribute to reservoir-sandbox/auto-yara development by creating an account on GitHub.

Web 漏洞自动化扫描小工具（Python）. Contribute to Faeesu/WebScan-Tools development by creating an account on GitHub.

Intentionally-vulnerable INERT corpus proving Zorro catches the 2026 AI-built-software threat surface (malicious models incl. NullifAI/GGUF-SSTI, MCP poisoning, slopsquat, SCA, SAST, IaC, secrets) ...

Cudy LT400 luci-app-gcom SMS authenticated root command injection (CWE-78) — advisory + PoC - archnexus707/cudy-lt400-gcom-sms-rce

A modular Python-based vulnerability scanner that automates network reconnaissance, service fingerprinting, web crawling, and web vulnerability detection, including reflected XSS and HTML injection...

SpringBootCMS 是一套面向内容管理场景的开箱即用型 Web 平台，专注于解决以下痛点： 🏢 政府/协会/企业官网搭建：内置多频道、动态表单、活动签到等业务模块，无需从零开发 🛡️ 安全合规要求：通过全系统安全审计（SQL 注入/XSS/CSRF/SSRF/RBAC 等 14 类风险全部加固） ⚡ 快速交付：前后台开箱即用、自带 SEO 优化、模板化页面配置、数据库 DDL + ...

绿盟漏扫平台任务自动化下发. Contribute to bishengyvv-pixel/NsfocusOpsKit development by creating an account on GitHub.

YARA rules. Contribute to IvanT7D3/YARA-Rules development by creating an account on GitHub.

Out-of-process YARA Macro/OLE/VBA/PDF/etc scanner backend, with rspamd/sieve/sa plugin. HTTP /scan, verdict cache + singleflight + optional Redis, distroless. - eilandert/mailstrix

Just A C Shellcode Loader . Contribute to spoooky762/C-ShellCode-Loader- development by creating an account on GitHub.

OWASP Sentinel Pro - real-time passive OWASP Top 10 + JWT/OAuth/SAML scanner for Burp Suite (Montoya API) - r04i7/owasp-sentinel

VulnGuard AI is an AI-powered smart contract vulnerability scanner that instantly detects security flaws in Solidity code. Paste your contract → Get real-time analysis of reentrancy, overflow, acce...

Double-free in Apache httpd mod_http2 stream cleanup leading to pre-auth RCE - gagaltotal/CVE-2026-23918-Double-free-Apache-httpd-mod_http2

Evidence-driven security reasoning platform: a 17-module purple-team/detection-engineering pipeline plus the Blackwell Core reasoning layer (correlation, risk scoring, confidence, attack path predi...

API Security Vulnerability Scanner designed to help you secure your APIs. - cerberauth/vulnapi

Hacker-Man Suite — a browser-based bug bounty toolkit combining real passive recon (DNS, Shodan, subdomain discovery) with vulnerability signal detection (SQLi, XSS, IDOR, SSRF, host header injecti...