Professional-grade modular Android 12+ penetration testing framework — 10 modules: Recon, Payload, Installer, C2, PrivEsc, Persistence, Exfiltration, MITM, Automation, Reporting - UsamaMatrix/Andro...

This repository contains my detection rules for all kinds of malware and suspicious software. - ilyas7/yara-rules

End-to-end malware analysis reports, extracted IOCs, and custom YARA detection rules developed in an isolated lab (FLARE-VM / REMnux). Includes WannaCry, trojans, and malscripts. - R3DN1GHT2005/Mal...

漏洞扫描智能体. Contribute to bear561/vuln-scan-agent development by creating an account on GitHub.

Contribute to 0x00phantom-hat/CVE-2026-11991-Exploit development by creating an account on GitHub.

Web vulnerability scanner. Contribute to Xuxu1020/bobscan development by creating an account on GitHub.

Afrog Distributed Master. Contribute to wffwf/DistributedAfrog development by creating an account on GitHub.

Black-box penetration test of a PHP internal management system. Identified 5 vulnerabilities: Critical SQL injection with query disclosure, stored XSS with session cookie theft, IDOR across client ...

Ethical web application security testing project demonstrating SQL injection and reflected XSS vulnerabilities in an isolated lab environment. - oarabengkhunou-source/Penetration-Testing-Project

VulnRecon is an automated web vulnerability scanner for detecting OWASP Top 10 security flaws and performing website reconnaissance. - Amans66/VulnRecon

Magento 2 / Adobe Commerce security patch for the StyleSmuggler GraphQL template-injection RCE zero-day (sansec.io/research/stylesmuggler) - Ceymox/StyleSmugglerShield

CVE-2026-81780 — Hash Form RCE. Contribute to 0xTerror/CVE-2026-81780-Hash-Form development by creating an account on GitHub.

Next-generation intelligent Web Fuzzer & Directory Scanner written in Go. Features WAF detection, secret scanning, auto-calibration, and smart 403 bypass - abdulhalimaltuntas/capsaicin

Python-based web vulnerability scanner for basic security configuration assessment. - panda465/vulnerability-scanner

Burp Suite extension: an always-on 'Translated' tab that auto-detects and translates non-English request/response bodies inline. Google (no key) + offline LibreTranslate backends. -...

Burp Suite extension that bridges captured requests to VirtuProbe Studio for organizing and re-running them across projects - foobar-beer/virtuprobe-burp-extension

Autonomous real-time Nginx & Apache access log intrusion detection and active firewall response daemon. Regex-powered exploit mitigation (SQLi, XSS, Path Traversal, RCE), sliding-window rat...

Skills for coding agents that audit and harden other agents: SSRF gate audit, threat model for agentic spend, MCP visibility audit, signed audit log. MIT. - tuturama/agent-security