FirmSec is a firmware security analysis tool for IoT and embedded devices. It helps researchers, students, and product-security teams inspect firmware images, detect embedded components, identify p...

OxideCE-v7.9.1elite Precision-forged Rust vulnerability scanner. AI/ML-powered detection. Built for the offensive security elite. - HyperSecurityLabs/Oxidev7.9.1elite

收集整理一些自己觉得好用的漏洞. Contribute to qux-bbb/CVE_exp development by creating an account on GitHub.

Turn vulnerability-scanner output (Nmap, Nessus, Nuclei, Burp, ZAP, Acunetix) into polished, client-ready VAPT reports with consistent CVSS v3.1 scoring and fill your own company Word template in o...

Autonomous IDOR vulnerability scanner with HackerOne-ready report generation — manual, proxy, and crawl modes - IbrahimAbdulqadir/idor-hunter-pro

A YARA-based malware detection tool — a Python scanner that flags suspicious files using custom detection rules, built and tested with safe, isolated lab practices. - na8877waf-cmd/YARA-malware-det...

costrict-plugins mirror of github-trending-shiro-attack-cli (auto-generated, do not edit) - costrict-plugins-repo/github-trending-shiro-attack-cli

A modern, team-oriented web interface for Sliver C2 – bringing visual control and collaborative operations to red teaming. - RD-Teams/Sliver-WebUi

POC for CVE-2026-21858. Contribute to Fomovet/cve-2026-21858 development by creating an account on GitHub.

POC for CVE-2026-24688. Contribute to Fomovet/cve-2026-24688 development by creating an account on GitHub.

costrict-plugins mirror of github-trending-vulnerability-scanner (auto-generated, do not edit) - costrict-plugins-repo/github-trending-vulnerability-scanner

costrict-plugins mirror of github-trending-xss-vulnerability-scanner (auto-generated, do not edit) - costrict-plugins-repo/github-trending-xss-vulnerability-scanner

A Burp Suite extension that looks up a target's technology and saves the result to a local JSON file - heymeg/Tech-Stack-Recorder

A comprehensive browser extension designed for authorized security testing and penetration testing activities. CyberInject provides quick access to common security payloads across multiple vulnerab...

HackTheBox Nimbus (Hard) writeup: SSRF -> IMDS -> SQS worker RCE -> floci/LocalStack admin -> privileged-container root path - bidnessnonya28/nimbus-htb-writeup

create nuclei template skills for agent. Contribute to Mr-xn/nuclei-template-creator development by creating an account on GitHub.

Aperio Extraction (v1.0) — A centralized Command, Control, and Creator OS (C2 Nexus) engineered for ecosystem management, local cryptographic data isolation, revenue analytics tracking, and automat...

Technical case study of a Stored XSS vulnerability discovered through insecure file upload handling during a responsible disclosure process. - KerimovMehdi/stored-xss-from-file-upload-writeup

Vulnerability intelligence API that aggregates OSV, NVD, CISA KEV, EPSS, and vendor advisories (Fortinet, Palo Alto, Cisco) into a unified REST API with package-based search and deduplication. - TI...

Scan a repo's .claude/ config (settings.json hooks, MCP servers, env, allowed-tools) for the RCE & API-key-exfiltration footguns (CVE-2025-59536, CVE-2026-21852) that fire when you ...