YARA-based malware detection rules for identifying suspicious PowerShell activity, encoded commands, and credential dumping indicators. - Purva-cybersec/malware-detection-rule-development

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication - Bd-Mutant7/evilginx2

Bot 53 is a comprehensive, multi-platform command-and-control (C2) simulation framework designed to demystify and demonstrate the mechanics of IP spoofing and DNS manipulation. - Iankulani/bot53

CVE-2026-30-03 9.8 (Crítico) Possível RCE Jenzabar ICS + MoxieManager - itsismarcos/ICS-MoxieManager-FileUpload-PoC

备份的漏洞库，3月开始我们来维护. Contribute to eeeeeeeeee-code/POC development by creating an account on GitHub.

大学生自学 FastAPI 入门打造的完整学习项目，覆盖路由分发、接口文档、数据库集成、模板渲染等核心知识点，工程化结构设计，代码全注释，极简业务逻辑，快速掌握 FastAPI 的核心用法。 - taffy123d/FastAPI---

Contribute to MauricioTorresDev/Demo-API7-2023-SSRF development by creating an account on GitHub.

Authorization middleware, CSRF protection, and session settings for Echo - catgoose/porter

【Java计算机毕业设计分享】基于SpringBoot的农产品溯源系统，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - 5771323ykw/HlmgmiQTzX

Contribute to EQSTLab/CVE-2026-33017 development by creating an account on GitHub.

这是一个基于 Spring Boot + MySQL 的SQL注入可控靶场项目，用于学习和验证： SQL注入原理 不安全写法带来的风险 安全防护方案（预编译、参数化查询） - AbsoluteZero001/sql-injection-lab

A ruby gem for defending against Server Side Request Forgery (SSRF) attacks - arkadiyt/ssrf_filter

云安全RSS订阅源Cloud Security RSS Source. Contribute to you8023/cloud_sec_rss development by creating an account on GitHub.

授权靶场环境下的可视化「议会式」多 Agent 攻防演练控制台：NestJS 领域 API、Next.js SSR + BFF、Python sidecar 执行工具。 - Leveltoo/visual-agent-security-lab

Analyze TLS ClientHello messages to identify software via JA3 and JA3S fingerprinting with a fast, Go-based tool for network security and forensics. - Riotnguyenhu3847/ViperFin

Provide tools for penetration testing and ethical hacking with this Python-based suite designed for versatile security assessments. - Beatrisadecisive305/whoami

j 是一款 Rust 构建的命令行效率工具，融合别名管理、日报系统、AI 对话与 Agent 能力。支持注册应用和 URL 为简短别名一键打开，内置日报写入与 Git 同步，TUI 待办管理可联动日报，AI 对话支持多模型切换、流式输出和 Markdown 渲染。Agent 模式让 AI 自主调用工具完成复杂任务，支持多步推理、上下文自动压缩和后台任务执行。移动端扫码即可远程控制 AI 对话...

图片验证码识别，配合burp suite的captcha-killer-modified插件使用. Contribute to 18500233360/ocr development by creating an account on GitHub.

sfvbrr is a Golang tool to validate scene releases - autobrr/sfvbrr

Ultimate XSS Payload List (2026) — 500+ Cross-Site Scripting Payloads, Bypass Techniques, and Examples - securityelites/xss-payload-list