A Python tool to scan websites for basic security flaws - self72/website-vulnerability-scanner

Reproducer for CVE-2026-40047: Apache Camel camel-docling CLI argument injection / path traversal - oscerd/CVE-2026-40047

Flask用户管理系统 - SQL注入漏洞审计项目. Contribute to jjyyxx-1/user-management-sqli-audit development by creating an account on GitHub.

A Flask-based Web Vulnerability Scanner that analyzes websites for common security vulnerabilities, scans open ports, checks HTTP security headers, verifies SSL certificates, and generates PDF secu...

A Python-based security tool that crawls web applications and detects selected OWASP Top 10 vulnerabilities, including reflected XSS, SQL injection error patterns, and basic IDOR issues. It uses Re...

A community-curated, verified collection of Proof-of-Concept exploits for CVEs disclosed in 2026. - SecureWithUmer/CVE-2026-PoCs

Flask用户管理系统SQL注入漏洞检测与修复 - POC验证/参数化查询/安全加固. Contribute to 2007-ygp/flask-sqli-fix development by creating an account on GitHub.

Web常见漏洞检测工具 - 支持SQL注入/XSS/路径遍历/SSTI检测. Contribute to Baiye-2004/vuln-scanner development by creating an account on GitHub.

Modern macOS GUI for OpenConnect VPN built with Electron and React. Features profile management, network diagnostics, process monitoring, and comprehensive logging. Supports AnyConnect, GlobalPr...

Contribute to zero-trace7/CVE-2026-50229 development by creating an account on GitHub.

Continuously exports Burp Suite data to index databases in support of agentic penetration testing - AnomalousVectors/burp-exporter

A desktop operator console for Sliver C2, built with Wails. Provides a native, lightweight GUI interface for Sliver by directly interfacing with its gRPC service no proxies or protocol reimplementa...

Mission Critical Vulnerability Scanner (MCVS) Integrationtest Services provides Docker images that can be used for component, integration and end-to-end (E2E) testing. - schubergphilis/mcvs-integra...

An advanced shellcode encryption, obfuscation, and encoding engine designed for modern evasion workflows. - xec412/ShadeShell

P³-Shellcode Loader is a loader that implements a code injection technique which leverages the Process Parameters structure as an execution and staging location for shellcode injection into remote ...

Cross-OS forensic acquisition agent — walks a live host, mounted volume, disk image, or raw device and gathers artifacts into a signed, content-addressed bundle (Windows/Linux/macOS). - sltcnb/triager

Contribute to Nikolasel/nuclei-security-center development by creating an account on GitHub.

RCEKit — an RCE testing toolkit for authorized security testing. Generate context- and sink-aware payloads across 14 environments, deliver them (Burp/Nuclei export or the built-in --verify harness)...

WebStrike 是一套以 Chromium 系浏览器扩展（Manifest V3） 为受控端点的指挥与控制（C2）套件。与传统以进程/驱动为主的 C2 相比，其工作重心落在 浏览器安全域：在合规授权与攻防演练场景下，可显著降低与终端 EDR 在 进程注入、驱动、内核回调 等层面的直接对抗成本，同时将能力锚定在用户 真实访问的 Web 会话 上。 - ssrsec/webstrike

Reverse Analysis Platform for Threat Operations & Response - jcube3ai/raptor