A Web Vulnerability Scanner is a security tool designed to automatically detect common vulnerabilities in web applications. This project scans web targets to identify security weaknesses such as SQ...

The source code used to demonstrate the proposed mutation operators for CSRF and IPL was evaluated on the security functions of DVWA - arasyid10/IPL_CSRF_DVWA_Mutation

Advanced Windows Threat Hunting Lab: End-to-end detection of LSASS Credential Dumping, Parent PID Spoofing, and DLL Side-Loading (.NET) using Wazuh SIEM & Sysmon custom rules - phuongtech24...

LLM赋能的内存漏洞可利用性判定. Contribute to zp9080/llm4vea development by creating an account on GitHub.

Application Node.js/Express intentionnellement vulnérable pour la formation cybersécurité. Inclut SQL Injection, Command Injection, SSRF, XSS, JWT Bypass et plus. Interface moderne avec documentati...

APA即AutoPentestAI 是由APA安全团队开发的一款由大语言模型（LLM）驱动的自动化渗透测试框架。它结合了现代 AI 技术（RAG、ReAct）与传统安全工具，能够按照标准的渗透测试流程（信息收集 -> 漏洞探测 -> 漏洞利用 -> 权限维持 -> 横向移动）自动执行任务。 - JXJZJWHCM/AutoPentestAI

🚀 Discover and navigate security vulnerabilities in software with ExploitMaze, your tool for efficient and effective exploitation analysis. - Ahegaho/ExploitMaze

Contribute to rootdirective-sec/CVE-2026-23744-Lab development by creating an account on GitHub.

A Python-based web vulnerability scanner that detects SQL Injection, XSS, missing security headers, and common directories. - anweshsingh34-arch/web-application-vulnerability-scanner

The PoC for CVE-2025-70795 / CVE-2026-0828 and updated driver - ANYLNK/STProcessMonitorBYOVD

multiplare with real time data flow (Socket.io), cashed with redis, security- csrf cookies + token for varification - GitHub - klaus-0-0/Game-TS: multiplare with real time data flow (Socket.io), c...

Gurpreet Singh - Offensive Security Labs: 150+ web application penetration testing labs | Authentication bypass, SQL injection, XSS, CSRF | Burp Suite Professional | Python, Linux, Bash - Gurpreet-...

Challenge for Interview. Contribute to BergerFrederik/Hotel-eXXellent development by creating an account on GitHub.

A lightweight web-based HTTP proxy and pentest toolkit - GitHub - t-dpz/BurpLite: A lightweight web-based HTTP proxy and pentest toolkit

I built and documented hands-on cybersecurity projects focused on SOC operations, detection engineering, and threat analysis, including investigation of SQL injection, XSS, DoS, and zero-day RCE at...

Hex extension for burp. Contribute to nikaiw/hextraview development by creating an account on GitHub.

xss-payloads. Contribute to cigboeke/xss-payloads development by creating an account on GitHub.

Express CSRF token middleware with "Double cookie submit" - doochik/express-csrf-double-submit-cookie

SSRF protection for Go HTTP clients. . Contribute to abhinavxd/ssrfguard development by creating an account on GitHub.