Statistical C2 beacon detector — flags periodic, low-jitter connection patterns in network logs using timing analysis, without payload inspection. Supports CSV and Zeek conn.log - jaloliddin-sec/c2...

Fully functional, from-scratch alternative to the Cobalt Strike Beacon (red teaming tool), offering transparency and flexibility for security professionals and enthusiasts. - ElJaviLuki/CobaltStrik...

🛡️ 邮件安全架构师的完整作战地图：底层RFC协议族→中游SEG/Rspamd/DLP纵深防御→顶层红蓝对抗与ISO27001合规收束 - LeisureLinux/ebook-email-hardening

CVE-2026-53921. Contribute to 0xBlackash/CVE-2026-53921 development by creating an account on GitHub.

WTFirewall is a Dynamic Application Security Testing (DAST) extension for Burp Suite, written in Python (Jython). It serves as an automated Web Application Firewall (WAF) finger-printer, payload te...

Contribute to xzhibo99-code/sql-injection-guide development by creating an account on GitHub.

A powerful Burp Suite extension for **penetration testers** and **bug bounty hunters** to intercept, decode, edit, and replay **gRPC-Web** traffic. - Lu3ky13/gRPC-Web-Burp-Repeater

BurpSuite JS资源收集插件，被动拦截JS文件并按域名归类，内置静态扫描引擎从混淆代码中提取隐藏API与敏感端点。 - LilDean17/js-collector

▎ reg-finder — 批量 URL 注册入口筛选器 ▎ ▎ 面向漏洞赏金猎人（src 玩家）的高通量筛选工具。对信息收集平台每日产出的数千个 URL 并发探测，通过页面内容关键词匹配、 ▎ 表单检测与分类规则，对每个站点进行"注册可能性"置信度打分，输出高优先级候选列表及业务类型标注（电商、OA、投稿平台、统 ▎ 一登录等），...

ssrf_scan 是一个基于 Burp Suite 的 SSRF 检测插件，改造自 ssrf_fuzzer 项目，使用 ceye.io 作为带外（OOB）回调平台。插件通过拦截 Burp Proxy 的所有 HTTP 请求，智能识别请求参数中的 URL / IP / 域名值，并将其替换为 ceye.io 的随机子域名地址；随后调用 ceye.io API 查询 DNS 与 HTTP...

Contribute to eabubakr21/advanced-nuclei-templates development by creating an account on GitHub.

A client-side PHP security scanner that detects dangerous patterns like RCE, SQLi, XSS, file inclusion, command injection, and 40+ vulnerability types across your entire project - ShaikhNaasir/php-...

PoC: turning Handlebars SSTI into RCE via server-side AST injection (object-typed template input) — works on Handlebars ≥4.6, no prototype pollution. - adilaxmdv/handlebars-ssti-ast-rce

DDoS bypass CloudFlare. Contribute to Hokage-linchik/CloudflareBypass-2020-2026 development by creating an account on GitHub.

Contribute to CyberVinner/CP-PLUS-EZ-P21-CVE-2026-65893-65894 development by creating an account on GitHub.

Burpsuite 扩展开发技能包. Contribute to helGayhub233/burp-expansion-skills development by creating an account on GitHub.

A Python-based web application vulnerability scanner that detects common vulnerabilities such as XSS, SQL Injection, and CSRF using Flask, Requests, and BeautifulSoup. - kondojupavani927-sketch/Web...

Sentryline Network Vulnerability Scanner. Contribute to TejasGowda2012/Sentryline-Network-Vulnerability-Scanner development by creating an account on GitHub.

KSU installer for supported firmware with CVE-2026-43499 - WitAqua-tools/Root-My-Device

A web-based Vulnerability Scanner built with Python and Flask that scans user-specified targets for common security issues, open ports, SSL/TLS certificate status, and security configurations, then...