OWASP Sentinel Pro - real-time passive OWASP Top 10 + JWT/OAuth/SAML scanner for Burp Suite (Montoya API) - r04i7/owasp-sentinel

Just A C Shellcode Loader . Contribute to spoooky762/C-ShellCode-Loader- development by creating an account on GitHub.

Out-of-process YARA Macro/OLE/VBA/PDF/etc scanner backend, with rspamd/sieve/sa plugin. HTTP /scan, verdict cache + singleflight + optional Redis, distroless. - eilandert/mailstrix

YARA rules. Contribute to IvanT7D3/YARA-Rules development by creating an account on GitHub.

绿盟漏扫平台任务自动化下发. Contribute to bishengyvv-pixel/NsfocusOpsKit development by creating an account on GitHub.

SpringBootCMS 是一套面向内容管理场景的开箱即用型 Web 平台，专注于解决以下痛点： 🏢 政府/协会/企业官网搭建：内置多频道、动态表单、活动签到等业务模块，无需从零开发 🛡️ 安全合规要求：通过全系统安全审计（SQL 注入/XSS/CSRF/SSRF/RBAC 等 14 类风险全部加固） ⚡ 快速交付：前后台开箱即用、自带 SEO 优化、模板化页面配置、数据库 DDL + ...

A modular Python-based vulnerability scanner that automates network reconnaissance, service fingerprinting, web crawling, and web vulnerability detection, including reflected XSS and HTML injection...

Cudy LT400 luci-app-gcom SMS authenticated root command injection (CWE-78) — advisory + PoC - archnexus707/cudy-lt400-gcom-sms-rce

Intentionally-vulnerable INERT corpus proving Zorro catches the 2026 AI-built-software threat surface (malicious models incl. NullifAI/GGUF-SSTI, MCP poisoning, slopsquat, SCA, SAST, IaC, secrets) ...

Web 漏洞自动化扫描小工具（Python）. Contribute to Faeesu/WebScan-Tools development by creating an account on GitHub.

Contribute to reservoir-sandbox/auto-yara development by creating an account on GitHub.

Check if a CVE has a Nuclei detection template in projectdiscovery/nuclei-templates - VixianSchool/nuclei-cve-check

Advanced Burp Suite extension that pinpoints the exact cookie(s)/header(s) maintaining a session, with OR-group & minimal-combination detection and send-to-Repeater. - r04i7/burp-session-to...

Contribute to D0Tx8FF/yara-rules development by creating an account on GitHub.

一个给 AI 智能体使用的本地文档读取技能包。它会把 PDF、扫描 PDF、DOCX、PPTX、XLSX、旧版 Office、图文混排报告、审计材料、漏洞报告等文件解析成智能体容易阅读和追溯的产物：`document.md`、`document.json`、页面图、嵌入图片、表格和 `verification.md`。 - huohuo-huo/document-reader

Swagger UI API XSS poc. Contribute to B6G-K1LLER/SwaggerUI-DOMPurify-Bypass development by creating an account on GitHub.

CVE-2026-46331 — Linux Kernel Local Privilege Escalation TC pedit + IPsec TEE Page Cache Corruption · Affected kernels: ≤ 6.12.9 - vulnquest58/dirtyclone-exploit

Secure Web Application for Medical Appointments (MedicalApp) built with Java, Jakarta EE, Tomcat, and MySQL. Implements Role-Based Access Control (RBAC) and robust security measures including SSL/T...

Hacker-Man Suite — a browser-based bug bounty toolkit combining real passive recon (DNS, Shodan, subdomain discovery) with vulnerability signal detection (SQLi, XSS, IDOR, SSRF, host header injecti...

A Python based web vulnerability scanner that automatically detects XSS, SQL Injection, CSRF, and security header misconfigurations with crawling, proxy support, and HTML/JSON reporting. - mohammed...