Supervised detection-engineering pipeline — CAPA/FLOSS/DIE → Claude-drafted YARA-X rule → automated validation → human accept/reject gate. Includes a full malware analysis Detection Story. - mikepe...

Burp Suite extension to find hardcoded secrets & hidden endpoints in JavaScript. 150+ detection patterns, active JS fetch, low-noise false-positive filter. Part of TrinetLayer. - trinetlaye...

Contribute to andreich85/nuclei-templates-auto development by creating an account on GitHub.

Image Vulnerability Scanner Github Action. Contribute to Cloudanix/cloudanix-image-scanner-github-action development by creating an account on GitHub.

Multi-Chain Token Risk & Smart Contract Vulnerability Scanner (Solana & EVM) - tcp-raw/crypto-guard-engine

nuclei-templates-auto. Contribute to fofovicfof-ai/nuclei-templates-auto development by creating an account on GitHub.

基于 Vibe Pentest 的增强版本，采用 AI Agent 架构的自动化渗透测试工具。支持多 Agent 并行执行，能够对 Web 应用、API、管理后台等进行全面的黑盒渗透测试，输出稳定可靠的安全报告。 - kabuqin/autovibe_pentest

This repository contains a sample Java application vulnerable to command injection and server-side request forgery (SSRF). - DataDog/vulnerable-java-application

Senior-AppSec-style OpenCode skill for auditing and hardening Next.js App Router + React + TypeScript apps — injection, auth, Server Actions, CSRF/SSRF, CSP, and dependency risk. No CAPTCHA, no bli...

A reflected cross-site scripting (XSS) vulnerability in the login_newpwd.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary Javascript in the conte...

The ZenShare Suite application is vulnerable by a Reflected Cross-Site Scripting (XSS) vulnerability, affecting web application login and recovery password functionalities. - vEnablee/CVE-2026-30252

OSCP/OSCP+/OSAI knowledge base + 6 real Docker exploit labs (Log4Shell, Shellshock, Heartbleed, Fastjson, Commons Collections CC6, Shiro-550) - j32ryc/offsec-lab

TGSEC社区 @TGSEC · 擎天柱@Qtzuu 渗透测试工具包 —— 假设驱动的授权红队渗透测试技能框架：15个域 + 状态机攻击链 + 证据账本引擎 - fakedon/Qtzuu-pentest-toolbox

Go语言开发的高性能文件下载站，提供文件上传、下载、浏览、审核和管理功能，支持基于角色的用户权限控制。 - gomail1/go-download

Kente Retail order-service: Jenkins CI/CD with a gating Trivy scan and blue-green deploys (CI/CD lab, 'No More 2 A.M. Releases') - josephakayesi/kente-retail-order-service

Python-based web application vulnerability scanner using OWASP ZAP, Nmap, and Flask which detects exposed services, insecure headers, and misconfigurations with severity-classified reports. - prana...

银狐（SilverFox）威胁情报 IOC 数据. Contribute to Detect-DefenseLab/silverfox-ioc development by creating an account on GitHub.

A yara based MCP Server. Contribute to ThreatFlux/YaraFlux development by creating an account on GitHub.

Evidence-first multi-cloud DDoS exposure detection and posture management for AWS, Azure, and GCP — WAF, Shield, origin bypass analysis, and attack-path inference. - geekyshubham/nimble-csp-ddos-ex...

Automated YARA malware hunting and detection framework for security research. Collects malware samples from public feeds, scans them with platform-specific YARA rules, enriches detections with Viru...