⚡ Blitz Strike — a universal MCP penetration-testing toolbelt. Structured methodology: reconnaissance & attack-surface mapping, source-to-sink analysis, and live validation. 57 escalation c...

AI-assisted Python web vulnerability scanner for security analysis, risk scoring, and remediation reporting. - Akhyame/ai-web-vulnerability-scanner

throwaway PoC repo for authorized pentest - QuillShield engagement - whozzz988/quillshield-submodule-ssrf-poc

A collection of notes and scripts on web application vulnerabilities, created while learning ethical hacking and practicing on legal labs like PortSwigger. This is part of my personal journey into ...

Contribute to shivkoshti2012/Lab-Stored-XSS-into-HTML-context-with-nothing-encoded development by creating an account on GitHub.

系统披露 A58 存在的网络安全漏洞。. Contribute to RenAhsAcme/A58-Exploit development by creating an account on GitHub.

POC for CVE-2026-78006 The Events Calendar <= 6.17.4 - Unauthenticated PHP Object Injection to Remote Code Execution - DeadExpl0it/CVE-2026-78006-POC

Professional web vulnerability scanner with Burp Suite integration. 14 checks, async performance, HTML/JSON reports. - jamaxm/burp-autopilot

Defensive IOC and detection toolkit for CVE-2026-86218, a critical pre-auth RCE in N-able N-central. Includes IOCs, log scanner, Sigma, Splunk, Elastic/KQL detections, and incident response guidanc...

A hands-on foundation in memory corruption, fuzzing, crash triage, and mitigation bypasses (from lab setup through CVE research to exploit development). - TheMalwareGuardian/Binary-Exploitation

千星计划漏洞挖掘项目. Contribute to duskto/All_Stars development by creating an account on GitHub.

Cloud-native malware analysis engine utilizing Explainable AI (SHAP) and Threat Intelligence. Replaces black-box AV verdicts with forensic reports. Features PE/ELF analysis, YARA heuristics, XGBoos...

GhostLock (CVE-2026-43499) app for the Galaxy S26 series - 1ndevelopment/ghostlock-s26

Red vs. Blue CTF lab: stored XSS → cookie theft → MFA bypass via session replay, with Blue Team log forensics. Dockerized, single-VM deployment. - christopherbaptista/red-blue-ctf-lab

Experimentation. Contribute to J-Dheeraj/AI-exploit-CVE development by creating an account on GitHub.

Self-contained Red vs Blue cyber range lab simulating a Cookie Reuse & MFA Bypass vulnerability (XSS session replay) with full attack telemetry for Blue Team forensics. - DarthWakamiya/Cybe...

可恢复的 DSH 渗透测试模式：资产归档、证据复核、断点续跑与 Web 可视化. Contribute to baianquanzu/dsh-pentest development by creating an account on GitHub.

Agent of Death is an AI powered AI Agent vulnerability scanner. - Deaths-Head-Software/Agent-of-Death

IPv6 DNS takeover & NTLM relay attack chain in Active Directory using mitm6 — covering DHCPv6 spoofing, LDAP/LDAPS relay, passback attacks, and blue-team defenses. - mehedi-hasan-sami98/mit...

Complete, practical Google Cloud Professional Security Operations Engineer study guide. Features YARA-L detection rule engineering, Google SecOps (SIEM/SOAR) setups, Security Command Center archite...