This repository provides a complete, pre-configured environment for web hacking practice, including the classic **SQLi-Labs** and integrated **WAF Bypass Labs** (Java/Tomcat), all running seamlessl...

【Python计算机毕业设计分享】基于Python的注入漏洞扫描工具研究及防护实现，MySQL Python开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - ijabyregra/tGkuZBPPIg

Intentionally vulnerable e-commerce web app (PHP/MySQL + Node.js/MongoDB) built for hands-on penetration testing practice. Covers 13 documented vulnerabilities across SQLi, NoSQLi, XSS, IDOR, CSRF,...

Security scanner for MCP servers — vet an MCP before you wire it into an agent. Detects prompt-injection, credential exfiltration (via taint analysis), RCE, and supply-chain risks, and catches cros...

XSS-VIPER - Ultimate XSS Framework (2026). WAF bypass, auto-exploit, stealth mode, DOM detection, C2 callbacks & Termux support. Built for red teams & bug hunters. Strike Anywhere, ...

Enter a URL and see a real request dissected across the 7 OSI layers — DNS, TCP, TLS handshake & certificate, HTTP. Python stdlib backend, SSRF-hardened. - vladislavtaran/osi-explorer

Red Teamer · Active Directory Exploitation · Sliver C2 · Web AppSec | OSCP | CEH | CPTS - HeavyGhost-le/HeavyGhost-le.github.io

教育行业 SRC 弱口令字典生成工具 — 基于真实用户密码习惯 curated 模式. Contribute to Clam0428/edu-password-generator development by creating an account on GitHub.

My exploit scripts and vulnerability write-ups for OpenZeppelin's Ethernaut wargame, built with Foundry. - DiaBmond/ethernaut-solutions-foundry

Contribute to takayamaki/shirobai development by creating an account on GitHub.

comprehensive resource for writing, testing, and sharing YARA rules to enhance malware detection and threat hunting capabilities. - shreethaar/yara-rules

Unofficial OxCaml containers and fast Codespaces playground POC - cezarc1/docker-oxcaml

Epson Printer RAW Protocol Exploit Framework. Contribute to J4ck3LSyN-Gen2/CVE-2026-39047 development by creating an account on GitHub.

渗透测试流程、网络安全笔记等. Contribute to cao20031021/sec-study-notes development by creating an account on GitHub.

Detection-engineering kit — 10 tools (IOC/YARA/Sigma/Elastic/ATT&CK/SIEM) + an ATT&CK-mapped rule library + a live-refreshable known-bad blocklist. Offline, zero-dep. - cognis-digital/huntkit

Kernel info leak Proof of Concept patched in iOS 26.4 / macOS 26.4 - speedyfriend433/CVE-2026-28867-PoC

An Intelligent Web Vulnerability Scanner with AI-Powered Analysis and Reporting - n3erajan/SentryStrike

This Repo is the part of Al-Razzaq Programme. Contribute to msalman199/Advanced-Red-Team-Implant-C2-Development development by creating an account on GitHub.

Consolidate vulnerability scanner exports into prioritized, report-ready findings - aya-rojdam/scan-report-parser

Maintained fork of node-ip with the unpatched SSRF advisory (CVE-2024-29415) fixed - bybraveHQ/ip2