Burp Suite extension — passively detects secrets, API keys, credentials, JWTs & PII in HTTP traffic. 160+ detection rules, bulk scan, entropy analysis, HTML reports & more. - secret...

Security advisory for CVE-2026-30655: unauthenticated SQL injection in esiclivre (/reset/index.php). - brynax/CVE-2026-30655

基于React开发的钓鱼演练平台-----正式证书授权版本. Contribute to AWDSCAN/ReactFish development by creating an account on GitHub.

🔐 Compliance-first web ingestion engine • SSRF guard • PII scrubbing • Audit-ready • 💼 Available for commercial license/acquisition → ayman@teosegypt.com - Elmahrosa/safe-ingestion-engine

ClawdSecbot is a professional AI Bot security protection solution, providing security capabilities including real-time threat detection, prompt injection protection, and security auditing to compre...

Execute Beacon Object Files on target servers via an ASPX web shell using a COFF loader for security testing and research purposes. - FFR31MMRDyukikaze/ASPX_WebShell_COFFLoader

Bypass Windows User Account Control to run files with elevated privileges silently and customize the code for your needs. - Venturous-giant919/UAC-Bypass-FUD

HeaderPwn ported into a burp extension. Contribute to ceramicskate0/HeaderPwnBurpEXT development by creating an account on GitHub.

c2L — AI systems that carry responsibility. Commercial automation for document-heavy workflows. - Ahiya1/c2L

Quanta Analytica, by M Nuri Shakoor Consulting, applies the Conflict Systems Research Framework (CSRF) to deliver data-driven risk, security, and resilience analysis. Anchored in ISO 31000 and INSS...

CVE-2026-33693: SSRF via 0.0.0.0 Bypass in activitypub-federation-rust v4_is_invalid() (CVSS 6.5 Moderate) - SnailSploit/CVE-2026-33693

Contribute to benwaterson/technicolor-exploit development by creating an account on GitHub.

Linux LPE via snap-confine + systemd-tmpfiles, explained in depth - nomaisthere/CVE-2026-3888

exploring how to bypass legacy data brokers (ZoomInfo/Apollo) by building custom API extraction pipelines for highly fragmented, analog industries. - Verdent06/GTM-Data-Engineering-Pipelines

An autonomous agent that acts as a DEF CON-level Certified Ethical Hacker, using tools such as Nuclei, sqlmap, ffuf, Burp, ZAP, and the Social Engineering Toolkit (SET), (labs, CTFs, HackTheBox, Tr...

【Java计算机毕业设计分享】基于Java的钓鱼爱好者分享平台，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - laowang111101/oxcPutiyha

Detect and test JSON Web Tokens for security flaws with automated checks in Burp Suite extensions, including token analysis and active exploitation. - Orbadiahright862/JWTLens

SHIELD-X Advanced Ops v4.0 🛡️ Ultimate multi-threaded Python suite for Red Teaming. 🚀 🔹 Web Cloning: 1:1 mirroring with Ngrok for global access. 🔹 Live Sniffer: Real-time packet inspection (Scapy)....

Contribute to ctomassetti56/RedTeamC2 development by creating an account on GitHub.

next version of xscanner . Contribute to Auto-runs/Xsscan development by creating an account on GitHub.