Claude Code skill：對本機專案與開源 GitHub repo 做安全弱點掃描（依賴漏洞 / SAST / 機密洩漏 / 供應鏈健康度） - TSY3991/vuln-scanner

Enhanced Burp Suite MCP Server - Now with Advanced Features! - S0L0M0NxH3X4/Burp-Suite-MCP-Server-Extension

Python-based network vulnerability scanner using Socket Programming and Nmap for port scanning, banner grabbing, OS detection, and vulnerability assessment. - asif-visionary/vulnerability-scanner

Luvv-MCP 是一个 AI 原生的前端安全分析引擎，接入 Claude Code 后，你说一句"帮我审计这个网站"，AI 就能自动完成技术栈识别（1.8 万条规则覆盖 CMS/框架/CDN/中间件）、泄露扫描（阿里云 AK、GitHub Token、Webhook、JWT 等 60+ 类敏感信息）、漏洞审计（XSS、开放重定向、CSRF、IDO...

incident response toolkit. Parses Microsoft UAL, forensic artifacts, creates YARA rules from files, and scans directories with YARA rules - battleroomforensics/irtoolkit

Contribute to Saku0512/CVE-2026-54088-poc development by creating an account on GitHub.

costrict-plugins mirror of trailofbits-trailofbits-burpsuite-project-parser (auto-generated, do not edit) - costrict-plugins-repo/trailofbits-trailofbits-burpsuite-project-parser

Jinja2 SSTI 漏洞扫描 & RCE Payload 生成器. Contribute to ANAISMUSE/ssti-scanner development by creating an account on GitHub.

A POC of CI/CD with Symfony, Docker & CircleCI. Contribute to silarhi/symfony-docker-ci development by creating an account on GitHub.

Simulation using Sliver, LimaCharlie, VMs, C&C, & Threat Detection. - Tamerktb/EDR-Home-Lab

Local malware scanner: hash + entropy + PE + YARA detection, quarantine vault, and an upload-based web demo. - Kartik0219/malscan

AI-enabled web vulnerability scanner powered by Amazon Bedrock - SageSalmon/Diana-Web-Scanner

端到端 Linux 提权辅助工具集: 反弹 shell 接收 → linPEAS 上传分析 → CVE 匹配 → exploit 编译执行 → PoC 交付 - mcc0624/linux-privesc-linpeas

QQ小程序/微信小程序红队攻击面分析/快速漏洞/检查/筛查. Contribute to icecliffs/nextwq development by creating an account on GitHub.

Mini EDR (Endpoint Detection and Response) - YARA-based static scanner & real-time file monitor - TL-cg11/miniedr

Web security vulnerability testing skills/playbooks collection - 47 attack playbooks for XSS, SQLi, SSRF, CSRF, authentication bypass and more - langbyyi/websec-skills

Practical offensive security notes — XSS, SQLi, IDOR, Command Injection and more - hellboy-zero/offensive-security-writeups

Contribute to study714/Agentic-Vulnerability-Scanner development by creating an account on GitHub.

Dirbust is a Burp Suite extension that replicates the feature set of Dirbuster/Dirsearch/Gobuster directly inside Burp. It performs fast directory and file discovery using Burp’s own HTTP stack so ...

Offline-first pentest reporting and AppSec evidence control plane. SARIF/Burp/Nuclei/ZAP/GHAS/GitLab import → dedupe → risk → MD/HTML/SARIF/JSON reports. Self-hosted, no telemetry, no SaaS. - HQ-Ax...