WebAppHunter is a Python-based web vulnerability scanner designed to detect common web security issues such as SQL Injection, XSS, and insecure HTTP configurations. It helps perform basic reconnais...

基于蜜罐日志的攻击序列预测实验代码，实现日志预处理、ATT&CK 技术映射、攻击序列构建、CNN-LSTM/Transformer/GRU-Attention 模型训练与评估。 - iopok1qaw/attack-seq-prediction

基于国家标准知识库与多 Agent 协作，帮助开发者、学习者和团队完成代码漏洞学习、能力测评与审计训练。 - shyrel666/Secretest-Agent

渗透agent. Contribute to libai2dupfu/agnet development by creating an account on GitHub.

GPU bypass for IBM POWER8/POWER9 and PowerPC Mac - internal PCIe rescan + OCuLink support - Scottcjn/oculink-gpu-bypass

A state-machine-driven simulation environment for distributed XML Bomb and XXE attacks. - Suxfian/XML-XXE-DDosAttackWithStateMachine

本项目是面向恶意 URL 检测的研究型系统，围绕组件分割与多源特征融合方法开展二分类识别研究，基于 PyTorch 构建模型训练与评测流程，通过对 URL 的域名、路径、查询参数等组件进行结构化拆分，并融合字符级序列特征、域名分支特征和统计结构特征，实现对可疑链接的高精度识别。系统支持主模型训练、基线对比、消融实验、分布外（OOD）鲁棒性评测和推理时延测试，可用于网络钓鱼 识别、恶意链接...

本项目实现了一个基于RoBERTa-TextCNN的Web攻击检测模型。项目以HTTP请求文本为输入，完成请求字段提取、编码解码、统一文本表示、RoBERTa领域继续预训练以及多类别攻击检测，支持Normal、SQLi、XSS、SSI、XPath、LDAPi、PathTraversal和OSCommandInjection等类别的识别。 - ySerene/Web-Attack-Detect...

本项目是基于大语言模型的可解释钓鱼网站检测系统，基于 URL、正文与外链等结构化特征上进行分类与解释生成，通过功能解耦双LoRA与专家-学生知识蒸馏完成模型压缩。仓库提供从模型训练训练、统一推理评测，到黑盒/白盒对抗样本生成、主动学习与增量复训、动态路由阈值扫描以及 LLM-as-a-Judge 解释质量评估的完整脚本链路，可用于钓鱼网站检测算法验证、可解释安全分析、对抗鲁棒性研究等学术场景...

CVE-2026-33825. Contribute to 0xBlackash/CVE-2026-33825 development by creating an account on GitHub.

Self-contained AppSec harness suite: threat modeling, SAST/DAST, PoC validation (PoC-or-GTFO), nuclei + Burp Pro integration, autonomous goal-driven loop. - Fl3xappeal/devsecops_crucible

本项目是基于大语言模型的可解释钓鱼网站检测系统，基于 URL、正文与外链等结构化特征上进行分类与解释生成，通过功能解耦双LoRA与专家-学生知识蒸馏完成模型压缩。仓库提供从模型训练训练、统一推理评测，到黑盒/白盒对抗样本生成、主动学习与增量复训、动态路由阈值扫描以及 LLM-as-a-Judge 解释质量评估的完整脚本链路，可用于钓鱼网站检测算法验证、可解释安全分析、对抗鲁棒性研究等场景。 ...

A list of useful Powershell scripts with 100% AV bypass (At the time of publication). - tihanyin/PSSW100AVB

Secure PHP weather application with user authentication, CSRF protection, and a server-side API proxy using environment variables. - deepkarmakar-appsec/php-weather-auth-app

Generate polymorphic, position-independent virtual machines (PIVMs) from arbitrary x86/x64 shellcode. - D7EAD/mkPIVM

Duplicated from lovivo-cdddcb57-6bb6-4cd1-8062-d3fa8617d1cf-rodata-comfort for US - wpinocho/lovivo-250762e0-c223-4c95-a0fd-7e67ce4eb81d-rodata-comfort-us

Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox - orinimron123/CVE-2026-40369-EXPLOIT

Advanced OWASP Top 10 (2025) Web Security Notes & Pentesting Methodology with real-world attack mindset, practical discovery techniques, and offensive security workflows. - AliAlMansorisec/...

Windows x64 position-independent shellcode that resolves `WinExec` from `kernel32.dll` at runtime and launches `calc.exe`. - cyberchancer/runShellcode

Analizar tráfico de red malicioso asociado a la botnet Emotet, identificando tanto la comunicación con servidores de comando y control (C2) como la generación de tráfico de spam (malspam) - luisza...