Automated API security testing framework in Java. Detects SQLi, XSS, SSRF, JWT flaws, CSRF, IDOR, deserialization, and more. Integrates with Burp Suite & OWASP ZAP. Supports CLI usage, Dock...

Burp upstream proxy that re-originates requests with a real Chrome uTLS (JA3/JA4) + HTTP/2 fingerprint to bypass Cloudflare TLS-fingerprint blocking - hyderpwn/burp-cloudflare-fp-proxy

Contribute to dRafaleD/Malware-analysis-AsphDex development by creating an account on GitHub.

元情 yotta-intel — 威胁情报 IOC 提取与规范化引擎：IP/域名/URL/邮箱/哈希/CVE，defang/refang、去重归一、输出 CSV/JSON/STIX-lite（零依赖 Python 3.8+） - YottaMeta/yotta-intel

Oracle WebLogic Console unauthenticated auth bypass + RCE exploit (CVE-2020-14882 / CVE-2020-14750) - hyderpwn/weblogic

Detection engine — Sigma and native rule matching plus YARA over a normalized forensic timeline; detections emitted as events. Part of the Citadel suite. - sltcnb/sigil

Infrastructure-as-code deployment and configuration for a Tenable Nessus vulnerability scanner on the nwarila platform. - nwarila-platform/nessus

Oracle WebLogic Console unauthenticated auth bypass + RCE exploit (CVE-2020-14882 / CVE-2020-14750) - hyderpwn/CVE-2020-14882-weblogic

Root My Galaxy SM-S9180 (dm3q) S9180ZHS8FZG1 payload port - CVE-2026-43499 + KernelSU LKM - hackyangwen-lgtm/rmg-s9180-fzg1

Run coding agents in Apple Virtualization VMs whose network egress they cannot bypass. Enforcement lives outside the guest, so it holds even against root with every capability. - satishbabariya/san...

网络安全实验室：漏洞扫描与防御策略. Contribute to Xufazhong/network-security-lab development by creating an account on GitHub.

A web-based vulnerability scanner for authorized security assessments using OWASP ZAP. - Ibrahimx07/Website-Vulnerability-Scanner

Python security tools built from scratch while learning ethical hacking — port scanner, web vulnerability scanner, and password analyser. - Sharan-Ravindran/python-security-tools

Autonomous AI-powered penetration testing agent built with LangGraph and Groq (Llama 3). Automates recon, nmap scanning, CVE lookup via ChromaDB, and exploit planning through a multi-phase reasonin...

APT and DNF repositories for Yara Code. Contribute to vsdudakov/packages development by creating an account on GitHub.

Concorde is an advanced, GUI-based Red Team command and control (C2) framework designed for penetration testers and security professionals. It provides a comprehensive suite of tools for reverse sh...

检查并自动删除完全重复的nuclei poc，也可以设置相似度阈值，匹配相似度删除。. Contribute to BeliefGuy/nuclei_check_repertev development by creating an account on GitHub.

Automated Python XSS Vulnerability Scanner and PHP Remediation Project - pubudud735-dotcom/web-xss-scanner-and-patcher

Zero-trust security guardrails and automated audit tools for AI-generated mobile and desktop apps. Prevents Electron RCE escapes, unsafe IPC channels, plaintext credential storage, and deep link ta...

GitHub-only: Chronicle YARA-L, Splunk SPL, Defender XDR hunting concepts, Gitleaks/Semgrep CI. Not employer production. - kelvinodarikpe88/portfolio-secops-detections