A comprehensive Burp Suite Professional extension providing MCP server functionality for AI-powered security testing with AI Agents - fwaeytens/burp-mcp-bridge

Contribute to marklangan/MarkLangan_C22470414_FYP development by creating an account on GitHub.

Contribute to Scaler-Cybersecurity1/csrf-clickjacking-lab development by creating an account on GitHub.

Go daemon for network probing & interference detection (DNS, RST, SNI, TLS, DPI, throttling). gRPC client, secured HTTP API (auth/TLS/rate-limit), Prometheus metrics, SSRF protection, Docke...

本项目面向文件上传安全场景，构建了一套集漏洞靶场、攻防知识库、轻量大模型辅助分析、上传安全网关、评测脚本与前端仪表盘于一体的实验原型。系统用于研究不同文件上传漏洞场景下的攻击样本组织、知识表示、规则生成、网关检测与结果分析过程，重点验证“攻击卡—攻击样本卡—防御卡—上传网关—评测结果—仪表盘”这一闭环设计。 - Taurdow/Upload-sec-lab

Apache Tomcat EncryptInterceptor Bypass → Unauthenticated RCE (CVE-2026-34486) - 404-src/CVE-2026-34486

Aethelium: A hardware-first, runtime-less language for modern systems programming. Bypassing linkers and bulky frameworks to emit UEFI and bare-metal binaries directly. - Aethel-Systems/Aethelium

Tivoli FastBack Server (6.1.4) is vulnerable to a stack-based buffer overflow allowing threat-actors to gain Arbitrary Code Execution (ACE) via a remote TCP-connection. The PoC provided in this rep...

Bug bounty report demonstrating XSS and IDOR vulnerabilities with exploitation and mitigation strategies - Lilian-Sec/bug-bounty-report-xss-idor

Seize every opportunity in life; let the power of love ignite the soul, and harvest warmth and beauty in every moment. - 8partki/xxe_fwtn

Contribute to Shashwath800/ssrf development by creating an account on GitHub.

Multi-tunnel VPN orchestrator for macOS, Linux & Windows - OpenVPN, FortiVPN, sing-box with split routing, DNS bypass proxy, and plugin system - enyonee/TunnelVault

CVE-2026-39987: Marimo Python Notebook Pre-Auth RCE (CVSS 9.3). Python & Nmap NSE detection scripts. Missing authentication on /terminal/ws WebSocket endpoint gives attackers a full PTY she...

Scan reflected XSS with an automated bug bounty workflow that chains tools from subdomain discovery to confirmed PoC findings - brittle-finance685/XSS-HUNTER

Contribute to Mireezzzz/ssrf_lab development by creating an account on GitHub.

SNISPF - Cross-Platform SNI Spoofing & DPI Bypass Tool - Rainman69/SNISPF

CVE labs . Contribute to punitdarji/tomcat-cve-2026-34486 development by creating an account on GitHub.

A Chrome extension that automatically fills out surveys on ctt-sis. Saves time and avoids the tedious manual clicking. - nqd2/HUST-Survey-Bypasser

Contribute to ThePyroArsonist/RedTeamTools development by creating an account on GitHub.