A Python-based mini vulnerability scanner for detecting open ports, services, and basic security issues. - bharath-1206/Mini-Vulnerability-Scanner

On-demand malware scanner for Windows (hash signatures, YARA-style rules, PE heuristics) with a CLI and WPF desktop UI. By Nolan Crowley. - nolancrowley101-bot/OpenSecurity

Contribute to VelesSecurity/MS17-010-EternalBlue-Command-Exploitation development by creating an account on GitHub.

Contribute to 44yyyy/Build-And-Bypass-EDR development by creating an account on GitHub.

GhostSSRF is a comprehensive, enterprise-grade SSRF testing framework designed for professional penetration testers and security researchers. It automates the complete SSRF exploitation lifecycle f...

Crash-recoverable, polite, SSRF-aware web crawler design practice - estelledc/system-design-09-web-crawler

Secure your web applications directly within your existing development workflow with our advanced vulnerability scanner - Krishna10H/vulnerability_scanner_web

Automated Nmap, Nikto, Nuclei scanner with gemini 3.6 Flash AI reporting - Deviyakhatri/Vulnerability-assesment-tool

Technical analysis and clean Java Thread Echo PoC for Oracle WebLogic Server vulnerability chain. - VelesSecurity/CVE-2020-14882-WebLogic-Analysis

CVE-2026-19501 poc. Contribute to typedefabcd1234ntd/CVE-2026-19501-poc development by creating an account on GitHub.

CVE-2026-19500 poc. Contribute to typedefabcd1234ntd/CVE-2026-19500-poc development by creating an account on GitHub.

CVE-2026-15748 - Unauthenticated RCE exploit for WordPress Forminator plugin (≤1.56.1). Automated detection, deep crawl, nonce extraction, and safe upload test. For authorized testing only. - yora1...

安全的PHP外链跳转页面：AES加密解密、SSRF防御、Referer防盗链、XSS防御、倒计时过渡 - tjsky/SafeRedirect

Web Application Security Testing using Burp Suite and DVWA, covering SQL Injection, Command Injection, Reflected XSS, Stored XSS, proof-of-concept evidence, and remediation recommendations. - Reddy...

Longer-form writeups behind the cheat sheets — how a SQL injection actually breaks a query, what Wireshark shows you in a TCP handshake, how ARP spoofing turns a network against itself. - thedetect...

Contribute to StefanTsonev/Secrets-Dependency-Vulnerability-Scanner development by creating an account on GitHub.

Enterprise-grade adversary simulation and security research framework and C2 for Windows environments. - 0x3xp/ferrous

CVE-2026-44578 PoC. Contribute to lxxexxbxx/CVE-2026-44578 development by creating an account on GitHub.

Burp SQLi plugin | Secondary development of xia‑sql3.3, four‑quote parity rule, order‑by probe, referer header injection test, distinguish database error & application type‑convert exceptio...