将任意可执行程序注册为 Windows 系统服务，基于 WinSW2 彻底重构并解决了他们3年没解决的安全漏洞 - NXRKYMANE/Silanes

A Burp Suite extension providing a typed RPC facade over the Montoya API in support of agentic penetration testing and research. - AnomalousVectors/burp-montoya-bridge

A Burp Suite extension providing a simple API to bridge external tools to Burp's Collaborator client. - AnomalousVectors/burp-collaborator-bridge

An enterprise-grade, automated XSS vulnerability scanner powered by Playwright. - toxicwaste12/renux-XSS-pro

Python-based OWASP Top 10 web vulnerability scanner for authorized security assessments, detecting common issues such as injection, security misconfigurations, authentication weaknesses, CSRF, SSRF...

rulec: one-way compiler lowering detection-rule dialects (YARA today, Sigma next) onto the vyre GPU rule engine; forward integration onto the vyre substrate with optional .srg text export. - santhr...

CVE-2025-57819-RCE_PoC. Contribute to TeteREN/CVE-2025-57819-RCE development by creating an account on GitHub.

A Django-based Vulnerability Scanner that scans websites for open ports, identifies missing HTTP security headers, detects server information, and generates vulnerability reports to help understand...

WAF efficacy testing platform: nuclei + gotestwaf + false-positive corpus, Precision/Recall/F1 scoring, web UI, containerized - shaanz/waf-efficacy

Linux主机应急响应扫描和取证工具. Contribute to LTSHFWJT/LERScan development by creating an account on GitHub.

Automated Vulnerability Scanner. Contribute to mizan989/CyberSentinel development by creating an account on GitHub.

VampSecure Labs — Subdomain Takeover Vulnerability Scanner - belky-me/vamp-subdomain-takeover

AES-256-CBC shellcode loader with Hell's Gate direct syscalls and Early Bird APC injection - darkness215/darkcrypt

High-assurance, artifact-agnostic prompt for authorized security labs, exploit-chain research, PoC validation, and evidence-led reporting. - dinosn/security-research-orchestrator-prompt

4xx auth/authz bypass scanner — 54 verbs, 1137 headers, 22+ path tricks, FP suppression, Burp integration - Thar-un/auth-bypass-scanner

A basic network scan using the Nessus Vulnerability Scanner - signature-creator/NessusScan

Contribute to MinhHK68/CVE-2026-13158 development by creating an account on GitHub.

GLPI Privilege Escalation via authtype Manipulation PoC - CVE-2026-53625. Ethical PoC for the GLPI vulnerability allowing a Technician to take full control of any Super-Admin account through REST A...

Oracle Forms and Reports on WebLogic is powerful but notoriously difficult to diagnose. This script library exists because the author has spent too many hours debugging obscure configuration issues...

Contribute to tripatpu/xssadvancehunt development by creating an account on GitHub.