Production-grade CLI video downloader built with Clean Architecture, thread-safe concurrency, and a hardened, SSRF-protected fetching pipeline powered by yt-dlp. - AmrNagy10/M-Grabber

Self-hostable website capture API — screenshots, PDFs & MHTML archives via headless Chromium. Spec-first, queue-backed, SSRF-guarded. - moysis01/webcapture

nuclei detection templates for WordPress plugin security audits. - LL-V/wp-nuclei-templates

Contribute to tholv2000/burp_plugin development by creating an account on GitHub.

Self-hosted threat-intelligence desk for cyber defense teams. - ryanshrier/blueteam

【Python计算机毕业设计分享】基于Python的注入漏洞扫描工具研究及防护实现，MySQL Python开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - brentberli/wApmFEelTA

SQL注入漏洞复现报告——OWASP靶场实战，通过UNION注入提取数据库29条用户凭证 ThinkPHP 5.0.24 RCE漏洞复现报告——CVE-2018-16385，验证代码执行能力 - buzhimingdeaikun/SQL-ThinkPHP-5.0.24-RCE-

Contribute to Baophong7602/stored-xss-html-demo development by creating an account on GitHub.

Contribute to notedirequiensoyk-source/STACK-2026 development by creating an account on GitHub.

Here is a short version you can paste directly into your GitHub **Repository Description** box: > A lightweight, multi-threaded web security configuration and passive header vulnerability s...

nuclei template for CVE-2026-56291. Contribute to rimbadirgantara/CVE-2026-56291.yaml development by creating an account on GitHub.

Detects hardcoded credentials, API keys, or authorization tokens embedded in HTML, JavaScript, or CSS served from web applications. - stefanhesselman/Nuclei-Template-Credential-Detection

We focus on security research, penetration testing, information gathering, JavaScript auditing, and automated security analysis. We continuously compile securit - do-whilefor

CVE-2026-36214 - osTicket Stored XSS via Bootstrap Tooltip - PoC & Analysis | CVSS 8.7 HIGH | AMN SECURITY - amnsecurity/CVE-2026-36214-osTicket-XSS

CVE-2026-35204 - Helm Plugin Path Traversal Arbitrary File Write - PoC & Analysis | CVSS 8.6 HIGH | AMN SECURITY - amnsecurity/CVE-2026-35204-Helm-Plugin-Traversal

JavaScript malware and vulnerability scanner. Runs untrusted JS in a sandboxed QuickJS-on-WebAssembly runtime under wasmtime, intercepting and observing every API call. - santhreal/jsdet

A Node.js and Express-based web application that demonstrates a Stored Cross-Site Scripting (XSS) attack in a controlled environment. The project simulates how attackers exploit unsanitized user in...

Reproducer for CVE-2026-46454 — Apache Camel camel-cometd inbound Bayeux header injection (unauthenticated Camel control-header injection → downstream producer steering / RCE) - oscerd/CVE-2026-46454

This repository contains scripts I create for cybersecurity automation. Specifically using bash - codelassey/scripts-and-tools

CSTC is a Burp Suite extension that allows request/response modification using a GUI analogous to CyberChef - usdAG/cstc