smart YARA its tools for make malware analysis . Contribute to mokhtarfertit/Smart-YARA-Rule-Generator development by creating an account on GitHub.

WebRecon — Subdomain Enumeration & Reflected XSS Scanner WebRecon is a Python-based reconnaissance and web application security tool designed to streamline the early stages of a penetratio...

Technical analysis and Proof-of-Concept for CVE-2026-60206, a critical Oracle WebLogic Server SAML authentication bypass vulnerability. - Debajyoti0-0/CVE-2026-60206

A 2026 collection of practical Burp Suite scripts for security testers, combining hands-on automation, extension examples, and focused utilities in one organized repository. - tyler-youngzxv6238/bu...

Contribute to davidattip/yara-scanner development by creating an account on GitHub.

A lightweight Python web vulnerability scanner with PDF reporting. - shahadali-4/vuln_scanner

Demonstration of OWASP JUICE SHOP DOM XSS. Contribute to devisalone/DOM_OWASP_JUICE_SHOP development by creating an account on GitHub.

Interactive XSS payload generator. Contribute to XSS-PoC/XSS-PoC development by creating an account on GitHub.

A modular, extensible vulnerability scanner in Go. - therandomsecurityguy/flan-go-scan

Burp2Postman is a Java/Montoya Burp Suite extension that sends selected HTTP requests directly to Postman. It does not export a collection file and does not hardcode workspace, collection, or folde...

这是一款接入ai分析的集成信息收集工具，集成了多个主流github上优秀的信息收集工具，并通过ai进行自动化信息整理，精准高效暴露突破口给予渗透人员 - SilasWu50/WebScanner-with-AI

Free Active Directory pentesting tool for Linux. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and c...

A simple Python-based vulnerability scanner that detects open ports, identifies common services, checks possible security issues, and generates a scan report. - Kalsoom-Gill/Syntecxhub_Vulnerabilit...

接入ai分析的集成信息收集工具，集成了多个主流github上优秀的信息收集工具，并通过ai进行自动化信息整理，精准高效暴露突破口给予渗透人员 - SilasWu50/InformationCollecter-With-AI-analyzing

Static security scanner and linter for GitLab CI. Finds .gitlab-ci.yml misconfigurations, supply-chain risks, and leaked secrets. Offline, SARIF output, OWASP CICD-SEC and CWE mappings. - glsec/glsec

Mobile command center for Red Team operators. Vuln tracking, C2 monitoring, encrypted payload vault. Built with Flutter + Firebase. - AbdoFawzi777/redops-hub-website

7-Zip XZ Decoder Heap Buffer Overflow - Full analysis, root cause, PoC, and RCE exploitation roadmap - liyuxuan504-byte/CVE-2026-14266

Technical analysis and advisory for CVE-2026-48908: Unauthenticated Arbitrary File Upload to RCE in JoomShaper SP Page Builder. - imXur/CVE-2026-48908-Joomla-SP-Page-Builder-RCE

用于生成 fastjson 1.2.83 RCE 所需要的 Jar 包，含内存马注入功能。. Contribute to heihu577/fastjson-1.2.83-rce-jar-generator development by creating an account on GitHub.

HexHunter is a lightweight and beginner-friendly web vulnerability scanner designed for basic penetration testing. It crawls websites and detects common vulnerabilities such as SQL Injection (SQLi)...