Strix 落地与调教完全指北 —— 这是一个专注于下一代自主 AI 渗透测试代理Strix 的实战部署与性能榨干指南。 以及如何通过 --instruction 指令化身“赛博御兽师”操纵 AI 黑客注意力的进阶玩法的核心沉淀。内含国内网络环境下 Docker 0/33 沙箱卡死究极加速方案，全网最全的多模型（DeepSeek-V4、Claude、火山引擎、OpenRouter）高性价比...

Strix 落地与调教完全指北 —— 这是一个专注于下一代自主 AI 渗透测试代理Strix 的实战部署与性能榨干指南。 以及如何通过 --instruction 指令化身“赛博御兽师”操纵 AI 黑客注意力的进阶玩法的核心沉淀。内含国内网络环境下 Docker 0/33 沙箱卡死究极加速方案，全网最全的多模型（DeepSeek-V4、Claude、火山引擎、OpenRouter）高性价比...

本项目是一个面向 AI Agent 的 Linux 渗透测试技能（Skill），已获得目标机器 SSH 凭证后，自动对目标主机进行全面的安全漏洞发现、利用验证与报告输出 - fatboyer/linux-vuln-discovery

Unauthenticated Stored XSS in Joomla Helix Ultimate (JoomShaper) <= 2.2.6 - Is4yev/CVE-2026-57829

Unauthenticated Arbitrary File/Folder Deletion in Joomla Helix Ultimate (JoomShaper) <= 2.2.6 — CVE-2026-57830 - Is4yev/CVE-2026-57830

1. P（Preparation，准备）：准备阶段，组建应急响应团队，准备工具和文档 2. D（Detection，检测）：检测阶段，确认安全事件是否发生，收集初步信息 3. C（Containment，抑制）：抑制阶段，限制事件影响范围，防止进一步扩散 4. E（Eradication，根除）：根除阶段，清除恶意代码、后门，修复漏洞 5. R（Recovery，恢复）：恢复阶段，恢复系统正...

Reproducer for CVE-2026-43867 — Apache Camel camel-pqc AwsSecretsManagerKeyLifecycleManager unsafe key-metadata deserialization (RCE) - oscerd/CVE-2026-43867

A combination of CVE-2026-55494 and GHSA-c2h5-ppv9-7vrq to get root privilege RCE in tugtainer - 4qu4r1um/tugtainer-1.30.2-RCE

Burp Suite SQL 注入辅助检测插件，仅用于授权安全测试. Contribute to kenny25526/kennysql development by creating an account on GitHub.

Burp Suite Pro extension that runs sqlmap with a bundled Python+sqlmap runtime — no local install needed. Repeater-style tabs, native Burp issues, HTML report. - chan770/Burp-sqlmap

Edit PDF files directly in your browser with this TypeScript toolkit, ensuring all document processing stays local for privacy. - Bigeye1445/pdfstudio

High-performance web vulnerability scanner featuring 60+ security checks, real-time analysis, and automated reporting. - NAIF-alghamd1/devil

OPPO Find X6 Pro GhostLock (CVE-2026-43499) exploit adaptation - Thiasap/oppo-pgem10-ghostlock

[⚠️ In Progress] An automated workflow that ingests suspicious files, performs malware analysis in sandbox, and generates actionable security reports. - jesuismarie/Automated-Malware-Analysis-Workflow

Mini YARA malware detector: 10 hand-written rules, safe synthetic test samples, Python scanner with SHA-256 fingerprinting. Educational project. - zainabh4san/mini-yara-detector

PatternShield is an advanced Web Exploit Detection and Vulnerability Assessment Framework developed by Jyothendra. It automatically fingerprints web technologies using multiple detection engines, i...

HackBar – Burp Suite Plugin Edition with Real-World Optimized Payloads - feng-mian01/HackBar

JWT 密钥被动扫描爆破 BurpSuite 插件. Contribute to opsqw/burp-opjwt development by creating an account on GitHub.