Trojan builders focus on creating hidden malware with downloader and encryption capabilities. Assembly changers and mutex features ensure uniqueness, while RAT clients provide remote access to infe...

AI-powered real-time threat detection system that analyzes nginx access logs using ML ensemble models and security rules to detect SQLi, XSS, SSRF, path traversal, command injection, and other web ...

Contribute to YordanStankov/Secrets-Dependency-Vulnerability-Scanner development by creating an account on GitHub.

A hybrid web vulnerability scanner built with Python 3.12, combining SAST (AST analysis) and DAST (SQLi, XSS) with an asynchronous web crawler. - alekzandren/Automated_Vulnerability_Scanner

Contribute to saipranathi25/jira_confluence_poc development by creating an account on GitHub.

Cybersecurity virtual experience projects covering Log4j vulnerability response and ransomware recovery with Python. - alainmartar/aig-shields-up-cybersecurity

Safe, budget-aware Python web access with SSRF protection, safe redirects, domain policies, retries, and response limits. - mirza1272/safe-web-access

CVE-2026-72550 — Friendica Unauthenticated Stacked-Query SQL Injection PoC (CVSS 9.8 Critical) - abdugafforov-bobur/CVE-2026-72550-poc

WebLens (Automated Web Application Vulnerability Scanner and Security Rating Platform) doesn't just find vulnerabilities—it explains them, prioritizes them, rates your application's...

Xac dinh va kiem tra MIME type an toan cho PHP - chong path traversal, SVG XSS, upload gia mao - nguyenquocanhz/php-mime-type

Reflected, DOM-based, filter bypass va boshqa Cross-Site Scripting (XSS) usullarida amaliy XSS laboratoriya yechimlari va ularning tahlili. - secrecyberuz-commits/xss-challenges

OWASP checklist mastery, auth flow attacks, CSRF/SSRF/Session Fixation/Hijacking, payment gateway pentesting, VulnHub VMs (Mr. Robot, Zero Bank, Jangow, N7), and PoC/VAPT-style reporting. - Nizuii/...

矛与盾 — AI 攻防演练场：攻方 AI agent 入侵 Docker 靶场，守方 AI agent 实时防御，人类在可视化控制台围观全过程 - AGIHunt/spear-and-shield

A curated, searchable index of 880 digital forensics and incident response tools, resources and references. - dfir-toolkit/dfir-toolkit.github.io

Intentionally vulnerable CTF lab simulating a full corporate breach — chain SQLi, IDOR, LFI, insecure JWT, and stored XSS through a PHP helpdesk into a weakly-hashed database, then privilege-escala...

Contribute to tiandeyiliushang-sudo/fastjson-1.2.24-TemplatesImpl development by creating an account on GitHub.

基于 Java Attach API（参考 Arthas 原理）的 fastjson safeMode 运行时检测工具。无需重启目标应用、无需修改目标代码，即可在线检测目标 JVM 中 fastjson 的 safeMode 配置状态、AutoType 行为及绕过风险。 - hl0rey/fastjson-safemode-detector

网络安全学习笔记 — CVE 漏洞研究与复现记录. Contribute to chengbochuan3/Security-Blog development by creating an account on GitHub.

Lightweight, dependency-free web vulnerability scanner for common misconfigurations and application flaws. - senseiink/bugseye