An AI driven, authorized bug bounty toolkit. A browser extension and a Burp extension feed a local agent that runs recon, scope gated probing, triage, exploit chaining, CVSS, PoC, and report ready ...

BCheck Helper is a Burp Suite extension that helps finding and importing BChecks scripts into Burp. These can easily be loaded from either a GitHub repository, network fileshare or a local filesyst...

【Java计算机毕业设计分享】基于Jboss的渗透测试管理系统，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - ibislon/TatvjrhSOt

A light weight vulnerability scanner in development phase - shubhamrawat0044/SecureScan

This repository provides a complete, pre-configured environment for web hacking practice, including the classic **SQLi-Labs** and integrated **WAF Bypass Labs** (Java/Tomcat), all running seamlessl...

【Python计算机毕业设计分享】基于Python的注入漏洞扫描工具研究及防护实现，MySQL Python开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - ijabyregra/tGkuZBPPIg

Intentionally vulnerable e-commerce web app (PHP/MySQL + Node.js/MongoDB) built for hands-on penetration testing practice. Covers 13 documented vulnerabilities across SQLi, NoSQLi, XSS, IDOR, CSRF,...

Security scanner for MCP servers — vet an MCP before you wire it into an agent. Detects prompt-injection, credential exfiltration (via taint analysis), RCE, and supply-chain risks, and catches cros...

XSS-VIPER - Ultimate XSS Framework (2026). WAF bypass, auto-exploit, stealth mode, DOM detection, C2 callbacks & Termux support. Built for red teams & bug hunters. Strike Anywhere, ...

Enter a URL and see a real request dissected across the 7 OSI layers — DNS, TCP, TLS handshake & certificate, HTTP. Python stdlib backend, SSRF-hardened. - vladislavtaran/osi-explorer

Red Teamer · Active Directory Exploitation · Sliver C2 · Web AppSec | OSCP | CEH | CPTS - HeavyGhost-le/HeavyGhost-le.github.io

教育行业 SRC 弱口令字典生成工具 — 基于真实用户密码习惯 curated 模式. Contribute to Clam0428/edu-password-generator development by creating an account on GitHub.

My exploit scripts and vulnerability write-ups for OpenZeppelin's Ethernaut wargame, built with Foundry. - DiaBmond/ethernaut-solutions-foundry

Contribute to takayamaki/shirobai development by creating an account on GitHub.

comprehensive resource for writing, testing, and sharing YARA rules to enhance malware detection and threat hunting capabilities. - shreethaar/yara-rules

Unofficial OxCaml containers and fast Codespaces playground POC - cezarc1/docker-oxcaml

Epson Printer RAW Protocol Exploit Framework. Contribute to J4ck3LSyN-Gen2/CVE-2026-39047 development by creating an account on GitHub.

渗透测试流程、网络安全笔记等. Contribute to cao20031021/sec-study-notes development by creating an account on GitHub.

Detection-engineering kit — 10 tools (IOC/YARA/Sigma/Elastic/ATT&CK/SIEM) + an ATT&CK-mapped rule library + a live-refreshable known-bad blocklist. Offline, zero-dep. - cognis-digital/huntkit