Contribute to dharmstm/CVE-2026-30503-OpenKM-6.3.12-Stored-XSS development by creating an account on GitHub.

Contribute to dharmstm/CVE-2026-30502-OpenKM-6.3.12-Reflected-XSS development by creating an account on GitHub.

全自动 Web 安全扫描引擎 — 支持 SQL 注入、XSS、目录遍历三大漏洞的自动化检测与风险闭环修复 - codewriterYang/SecurityScannerEngine

Cybersecurity portfolio focused on security audits and digital forensics (DFIR). Includes Windows log analysis, incident response, root cause analysis and real-world investigations. - rofesroger/au...

Offensive Security Platform — v6.6.1 Bug Bounty | Red Team | RE | CTF | Malware | AD | Cloud C2 Redirectors + SSL | EDR Evasion | Post-Exploitation Kit Powerlevel10k | Auto-Fix Engine | ETA T...

🛡️ Curated collection of 300+ free, open-source and some commercial Threat Intelligence feeds – IP, DNS, URL, hashes, CVEs, MISP and more with auto-validated and status-checked daily via GitHub Act...

Personal study notes and tools for networking, web app hacking, penetration testing, and basic programming (C++, Python). Includes HTTP/S, cookies, SQLi, XSS, enumeration, nmap usage, and more - ...

HTTP/2 Bomb PoC — CVE-2026-49975 (HPACK indexed reference bomb + flow-control stall) - mrx-arafat/CVE-2026-49975-POC

Contribute to Kimsangmook/xss-playground development by creating an account on GitHub.

0-Click RCE Android Adb TLS Wireless Debugging. Contribute to fredevsec/CVE-2026-0073 development by creating an account on GitHub.

Zero-trust behavioral AI exam proctor — a working mitigation against the macOS 26 invisible-window exploit. Built on Claude Sonnet 4.5. - Raoof128/Project-Simurgh

webScan 是一款基于 Kali Linux 和 AI 多智能体协作的网站安全风险自动化监测评估系统，输入 URL 后通过 5 个并行智能体协同执行信 息收集、爬虫、漏洞扫描、弱口令检测和安全事件分析，最终输出包含资产画像、五维风险评分、漏洞详情与整改建议的 Markdown + HTML 双格式报告。 - zhangshilin-cn/webScan

A modern, dependency-free weather app built with vanilla JavaScript (ES6+). Search any of 8 cities to view temperature, wind, humidity, and visibility from local JSON demo data. Features a responsi...

Kubernetes-native continuous security control validation for federal systems - primaris-tech/sidereal

Burp Suite extension that extracts and analyzes LinkedIn profile data from HTTP responses - godylockz/linkedin-scraper

Contribute to phamtuan79/waf-bypass-discrepancy-detector development by creating an account on GitHub.

One Box to Rule Them All! HexBox is a Raspberry Pi 3B-based red team platform that orchestrates Hak5 hardware (Pineapple, Shark Jack, Squirrel, Turtle, OMG Plug, Bash Bunny), Flipper Zero, and Sliv...

Contribute to PentesterFlow/Burp-Integration development by creating an account on GitHub.

Minimal Perl FFI bindings for the YARA malware scanning engine. - manwar/YaraFFI

CVE analysis of CVE-2025-40536, SolarWinds Web Help Desk security control bypass (CVSS 8.1). Covers vulnerability mechanics, attack chain with companion RCE CVEs, Storm-2603 threat actor attributio...