授权靶场环境下的可视化「议会式」多 Agent 攻防演练控制台：NestJS 领域 API、Next.js SSR + BFF、Python sidecar 执行工具。 - Leveltoo/visual-agent-security-lab

Analyze TLS ClientHello messages to identify software via JA3 and JA3S fingerprinting with a fast, Go-based tool for network security and forensics. - Riotnguyenhu3847/ViperFin

Provide tools for penetration testing and ethical hacking with this Python-based suite designed for versatile security assessments. - Beatrisadecisive305/whoami

j 是一款 Rust 构建的命令行效率工具，融合别名管理、日报系统、AI 对话与 Agent 能力。支持注册应用和 URL 为简短别名一键打开，内置日报写入与 Git 同步，TUI 待办管理可联动日报，AI 对话支持多模型切换、流式输出和 Markdown 渲染。Agent 模式让 AI 自主调用工具完成复杂任务，支持多步推理、上下文自动压缩和后台任务执行。移动端扫码即可远程控制 AI 对话...

图片验证码识别，配合burp suite的captcha-killer-modified插件使用. Contribute to 18500233360/ocr development by creating an account on GitHub.

sfvbrr is a Golang tool to validate scene releases - autobrr/sfvbrr

Ultimate XSS Payload List (2026) — 500+ Cross-Site Scripting Payloads, Bypass Techniques, and Examples - securityelites/xss-payload-list

Contribute to rakeshelamaran98/CVE-2026-30081 development by creating an account on GitHub.

Dependabot registry SSRF test. Contribute to fimskiy/dependabot-ssrf-test development by creating an account on GitHub.

Next-gen TUI-based security tool supporting HTTP, SSH, FTP, and SMTP. Features include auto-CSRF handling, asynchronous engine (aiohttp), and real-time analytics. Optimized for Termux & Lin...

基于大语言模型的代码漏洞风险检查工具，支持多种编程语言和检查模式，为开发者提供全面的代码安全评估解决方案。 - HeJiguang/codescan

Contribute to crazywifi/Redteam_LLM_Injection_payloads development by creating an account on GitHub.

Hands-on Directory Traversal labs from PortSwigger, documenting path manipulation, filter bypasses, and file access exploitation techniques. - bisurauniyar93/Directory-Traversal

Secure form app with CSRF protection and CORS using Node.js, Express, and JavaScript. - AnujRathi079/Secure-app

微信小程序 wx.requestVirtualPayment 封装：下单与签名由调用方注入（transaction），可选支付后轮询（pollOrder）；适用于微信原生开发和UniApp开发。 - devoink/mp-virtual-pay

Just a simple Rust automation for CVE-2026-29000, design to work against *ippsec's* Principal box on HackTheBox - 0xW1LD/CVE-2026-29000

Deploy the AI Red Teaming network client using Docker Compose — no Kubernetes or Helm required. - PaloAltoNetworks/ai-redteam-network-client-docker

Coursera Auto-Complete Extension — One-click course completion (videos, readings, discussions, plugins, quizzes, shareable link). Premium features with device binding, daily limits, and hard expira...

一个轻量级模块化 Web 漏洞扫描器（DAST），实现了 SQL 注入,XSS,命令注入等诸多漏洞的 自动化检测，具备可扩展的插件化架构。 - zzzjiushi/web_scanner

自动化渗透测试平台. Contribute to psp123123/fleetpilots development by creating an account on GitHub.