Standalone Python 3 proof-of-concept exploits for recent CVEs - each with a write-up and a screenshot of a real run. For authorized security testing and education only. - GODofExploit/exploit-arsenal

Python-based automated web vulnerability scanner capable of detecting SQL Injection, XSS, Blind SQL Injection, and missing security headers. - Dushyant479/Automated-Web-Vulnerability-Scanner

Burp Suite Operations Toolkit Shortcut Menu Extension. Burp Suite 常用工具集快捷菜单插件 - tldrw/Axon

Vulnerability scanner & auto fixer for AI written code — Python/JS/Java, free or paid AI, dependency CVEs. - LEXES7/XSEC

Python-based SIEM correlation engine with automated SOAR response — stateful multi-source log analysis, YAML detection rules, and YARA integration and dashboard view with grafana - 4rthur-Root/NYX

针对C/C++语言的自动化漏洞发现流水线。. Contribute to Criticayon/auto_fuzz development by creating an account on GitHub.

CVE漏洞. Contribute to sign9981/CVE development by creating an account on GitHub.

skill-渗透测试报告一键生成标准化系统漏洞清单Excel表，支持 opencode 和 Claude Code。 - gg-uu/vuln-checklist

AI驱动异步漏洞扫描平台，基于FastAPI+Celery+DeepSeek，支持端口探测、智能漏洞分析、自动生成渗透测试PDF报告。 - Kismet0329/clairscan

FIPS-aware RHEL vulnerability scanner with AI-assisted, approval-gated, transactional remediation - btdt1983/vulnscan-ai

An efficient vulnerability scanner developed in Python to detect common security flaws, including open ports, weak configurations, and outdated services. It serves as a practical introduction to pe...

漏洞库升级包制作工具，用于根据用户提供的材料制作漏洞库升级包。. Contribute to lzjiuhaoun/vulndb-packer-skill development by creating an account on GitHub.

🔴 Automated Python CLI framework that chains recon → scanning → CVE lookup → exploitation → HTML report generation for penetration testing - rithika-ujjalsingh/Auto-pentest-framework

YARA detection rules for RemcosRAT, AsyncRAT and NanoCore malware families - parth-pandit1/yara-malware-rules

Contribute to r1s1226/gap-xss-poc development by creating an account on GitHub.

Advanced OPSEC fork of Donut. Features a Custom in-memory CLR Host, Tail-Jump ETW bypasses, and zero-patch AMSI evasion for stealthy shellcode generation. - Zuigetzu/Donut-CustomHost

CopyFail漏洞复现. Contribute to kalinote/copy_fail_reproduce development by creating an account on GitHub.

A Go + Wails desktop toolkit for local security operations, Nuclei/POC processing, dddd fingerprint auditing, and external capability intake. - AJings3c/Doperationtool

Web application vulnerability scanner with a live dashboard, auto-crawler, and PDF/JSON/CSV reporting. - zainabtariq24/VulnScanner

Using steganography to hide Shellcode to bypass EDR detection - Evilearth-dotcom/Steganography-bypassing-EDR