DockerRemoteAPI未授权访问(2375端口)利用工具，支持容器逃逸. Contribute to Janhsu/DockerAPITool development by creating an account on GitHub.

飞牛系统（fnOS）远程代码执行链：认证绕过. Contribute to a0yami/fnos-rce-chain development by creating an account on GitHub.

基于Go语言的网络安全的封装开发库，包含在Go语言中的几乎全部的封装函数（包括但不限于、http、端口、sub、文件上传、sql）等一系列的函数封装，让网络安全开发在Go语言中更简单 - xiguayiqiu/gyscan_code

Spring4Shell detection system using Random Forest and L7 payload analysis - lukrencijus/spring4shell-rf-detection

CRAReady test fixture: vuln-spring4shell. Contribute to appliedai-uk/craready-test-vuln-spring4shell development by creating an account on GitHub.

🚀 Automate Sigma rule conversion to KQL and Terraform for Microsoft Sentinel, streamlining detection management with infrastructure-as-code. - guisant17/TerraSigma

The aggregation engine behind dragnet.dev polls ~70 threat-intel sources and emits Sigma rules, IOC feeds, and STIX bundles for every major SIEM. - dragnet-dev/dragnet

A malware scanner with Yara and ClamAV binding. Contribute to dmknght/rkcheck development by creating an account on GitHub.

Dynamic and static analysis with Real Time Malware Analysis with Antivirus for Windows, including open-source XDR (3 EDR projects), ClamAV, YARA-X, machine learning AI, behavioral analysis, Unpacke...

IOC scanner for agentic AI coding tools — detects Mini Shai-Hulud, Gemini CLI RCE, Cursor CVE-2026-26268, and DPRK PromptMink. - dhawaldesai/agentic-ioc-scanner

Contribute to alyaapm/CVE-2025-55182-shellinteractive development by creating an account on GitHub.

Threat intelligence database for PRX-SD. Hash signatures and YARA rules from 10+ open sources. - openprx/prx-sd-signatures

Collection of interesting Yara Rules. Contribute to S12cybersecurity/YaraRules development by creating an account on GitHub.

Hands-on exploitation of the VSFTPD 2.3.4 backdoor vulnerability using Metasploit to gain shell access, create users, modify logs, and attempt privilege escalation in a secure lab environment. - Da...

Discover LES-Modern v3.0, an advanced tool for dynamic Linux exploit suggestions, leveraging real-time CVE data and comprehensive reporting. 🚀💻 - Jarrenstyle/les-moders

70k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒 - topscoder/nuclei-wordfence-cve

Burp Suite 内嵌扩展型 MCP bridge，用来把 Burp 里的 HTTP history、Repeater、Scanner、接口聚合索引等能力暴露给支持 MCP 的 AI 客户端。 - laohuan12138/burp-mcp-bridge

Rust shellcode loader. . Contribute to tyto-sec/RustyShellLoader development by creating an account on GitHub.

SQL_Hunter 是一款面向 Web 应用安全测试场景的 Burp Suite 扩展插件，专注于 SQL 注入风险的辅助识别、请求分析与检测流程增强。插件可结合 Burp 的代理、重放与扫描能力，对目标请求中的参数位置、输入特征及响应差异进行自动化分析，帮助安全测试人员快速发现潜在的 SQL 注入风险点，提升漏洞验证效率与测试覆盖范围。该插件适用于常规渗透测试、安全评估、代码上线前验证及...

An automated exploit for CVE-2026-0073 (Android ADB TLS Auth Bypass). Features a built-in mDNS/Zeroconf scanner to instantly discover randomized Wireless Debugging ports on Android 13+ and establis...