Claude Code skill: turn confirmed vulnerabilities into submission-ready DOCX reports | 漏洞报告成稿 skill（SRC/0day 提交稿、分层验证门、Step 式 PoC、截图铁律） - v-yun/vuln-report-skill

Python network vulnerability scanner with port scanning, service detection, risk assessment, and automated reports. - Shumii98/Network-Vulnerability-Scanner

Contribute to YonLiud/geoserver-0day-rce development by creating an account on GitHub.

Local-first, AI-native Software Supply Chain Security Platform - Mah3Sec/ForgeGuardian

A safe malware analysis sandbox for detecting basic malware indicators using Python and YARA rules - mushtaqmuzaffar875-a11y/Malware-analysis-sandbox

Educational Velero playground for hourly and on-demand PostgreSQL backup and disaster recovery on Kubernetes - openmind-systems-lab/velero-playground-hourly

Contribute to app-sec-mm/ssrf-testing development by creating an account on GitHub.

Reusable Typecho 1.3.0 theme, plugins, Meilisearch search, monitoring, and SSRF hardening with bilingual deployment guides. - jinlio/luckyguo-typecho-suite

常用的渗透测试skills. Contribute to yMaine/wyang development by creating an account on GitHub.

2026 最新 iOS Coruna 漏洞演练与 DarkSword 0day 前沿动态监测。. Contribute to coruna19980101/darksword development by creating an account on GitHub.

Forgex 是一款面向 Windows 平台的集成式渗透测试工具箱。它将信息收集、漏洞扫描、爆破利用、逆向分析、移动端 Hook、代理隧道等数十款主流安全工具聚合在一个统一的可视化界面中，单击即可启动，免去了手工配置环境、切换多套软件的繁琐 - AWY-Cipher/Forgex

**MrCipher 是一款一体化的综合漏洞扫描与资产测绘工具**，把"主机发现 → 端口扫描 → 协议识别 → 子域枚举 → Web 指纹探测 → 漏洞检测 → 后渗透验证"整合成一条流水线，面向红队 / 安服 / 授权自检场景，提供 **命令行、交互式控制台、Web 界面（-ui）** 三种使用方式。 它的核心特点是：**自带一套 Go 原生重新实现...

External attack-surface assessment identifying a Stored XSS condition through reconnaissance, asset enumeration, and web application testing. - unknownAgent10/infomaniak-stored-xss-assessment

Vulnerability Assessment Report — DOM-Based XSS on OWASP Juice Shop. Manual black-box testing, PoC, and professional remediation writeup for Project 03: Web App Security. - profdniel/-VULNERABILI...

Rust bindings to LLVM. (Mirror of https://gitlab.com/taricorp/llvm-sys.rs/) - tari/llvm-sys.rs

ExploiterX is a lightweight, customizable vulnerability scanner designed to detect security weaknesses in web applications. This tool crawls target websites, identifies potential links and forms, a...

`awvs_json_word.py` 是一个将 **Acunetix（AWVS）/ Invicti** 扫描器导出的 JSON 结果文件，自动生成为**中文 Word 安全漏洞报告**的一体化工具。 脚本内置了数据解析、格式转换、中文化翻译、统计图表生成和报告排版等全部功能，只需一条命令即可完成从原始扫描数据到正式报告的全过程，无需任何人工干预。 - kabuqin/awvs_json_...

PoC for CVE-2026-73519 - WolfStack hardcoded cluster secret leads to unauthenticated RCE (CVSS 9.8) - squeeze440/CVE-2026-73519-WolfStack-PoC

PoC for CVE-2026-73847 - emlog AI Assistant CSRF to SQL execution to admin takeover (CVSS 6.8) - squeeze440/CVE-2026-73847-emlog-PoC

PHP反序列化Payload构造工具. Contribute to Zekon-Xu/PHP-Deserialization-Payload-Generator development by creating an account on GitHub.