The ZenShare Suite application is vulnerable by a Reflected Cross-Site Scripting (XSS) vulnerability, affecting web application login and recovery password functionalities. - vEnablee/CVE-2026-30252

OSCP/OSCP+/OSAI knowledge base + 6 real Docker exploit labs (Log4Shell, Shellshock, Heartbleed, Fastjson, Commons Collections CC6, Shiro-550) - j32ryc/offsec-lab

TGSEC社区 @TGSEC · 擎天柱@Qtzuu 渗透测试工具包 —— 假设驱动的授权红队渗透测试技能框架：15个域 + 状态机攻击链 + 证据账本引擎 - fakedon/Qtzuu-pentest-toolbox

Go语言开发的高性能文件下载站，提供文件上传、下载、浏览、审核和管理功能，支持基于角色的用户权限控制。 - gomail1/go-download

Kente Retail order-service: Jenkins CI/CD with a gating Trivy scan and blue-green deploys (CI/CD lab, 'No More 2 A.M. Releases') - josephakayesi/kente-retail-order-service

Python-based web application vulnerability scanner using OWASP ZAP, Nmap, and Flask which detects exposed services, insecure headers, and misconfigurations with severity-classified reports. - prana...

银狐（SilverFox）威胁情报 IOC 数据. Contribute to Detect-DefenseLab/silverfox-ioc development by creating an account on GitHub.

A yara based MCP Server. Contribute to ThreatFlux/YaraFlux development by creating an account on GitHub.

Evidence-first multi-cloud DDoS exposure detection and posture management for AWS, Azure, and GCP — WAF, Shield, origin bypass analysis, and attack-path inference. - geekyshubham/nimble-csp-ddos-ex...

Automated YARA malware hunting and detection framework for security research. Collects malware samples from public feeds, scans them with platform-specific YARA rules, enriches detections with Viru...

基于SQL注入+XSS漏洞检测+CSRF攻击的游戏资讯交流网站安全系统. Contribute to bysj2022NB/Game_SQL_XSS_CSRF_WebSecurity2027 development by creating an account on GitHub.

File Safety API: Sanitize uploaded files — strip GPS/metadata from images, neutralize CSV formula injection, and remove SVG XSS. A REST API on RapidAPI. - ishoediah/File-Safety-API

Contribute to 0xnoobsec/sliver-gui development by creating an account on GitHub.

AI 自动渗透测试代理系统，基于 CrewAI 框架，集成多种安全扫描工具和漏洞检测能力. Contribute to zyjzyjlh3-alt/ai-pentest-agent development by creating an account on GitHub.

Simple Vulnerability Scanner: scan CycloneDX/SPDX SBOMs against OSV with JSON/HTML/SARIF reports - osmankaankars/simple-vulnerability-scanner

Webhook inbox: HMAC, idempotency, SSRF-gated replay, DLQ redrive. - C-Rogs/relay

Contribute to jeromevidaao/home-exchange-cal-sync development by creating an account on GitHub.

Vibe CSA (Code Security Audit)，是一款基于 AI Agent 架构的代码审计工具，采用多 Agent 并行执行架构，用“上帝视角”静态审计源代码，用“实战模拟”动态验证漏洞，保证了 Web 漏洞挖掘的全面性和准确性，输出稳定可靠的安全报告，并提供可落地整改建议。 - ok-helloworld/vibe-csa

Demonstration of the expression language (EL) injection vulnerability CVE-2018-14667 using the photoalbum lab under Jboss application server - aitLmalem/CVE-2018-14667_Lab_POC