Penetration testing framework. Run the tools you already use; Raven captures the output, tracks findings, and generates the report. - chamberdoorsecurity/raven

A professional Python-based web application vulnerability scanner that detects security header issues, TLS/SSL problems, risky HTTP methods, exposed resources, cookies, and technology disclosure. -...

onyx — local-first WordPress vulnerability scanner. Reads the Wordfence feed from disk, no API, no accounts. MIT. - Boreas37/onyx

Claude Code skill: mine JavaScript bundles (live host / dir / URL list / Burp MCP proxy history) for hidden endpoints, params, secrets, feature flags, and authz logic. - z3r0s6/js-analysis-skill

Contribute to blackbox-ops/figma-ssrf-poc development by creating an account on GitHub.

Public writeup, PoC, and emulation materials for CVE-2026-6837 affecting Zyxel export-cgi PKCS#12 export handling. - minanagehsalalma/CVE-2026-6837-zyxel-export-cgi-command-injection

Public writeup, PoC, and emulation materials for CVE-2026-8508 affecting Zyxel captive-portal social login. - minanagehsalalma/zyxel-social-login-bypass-cve-2026-8508

This is my entry for the Battle Of Malware Bypass and EDR contest at Defcon 34 - Eap2468/Defcon-2026-Bombe-Malware-Contest

Delivery & Beyond（Hyena Quest）联机作弊插件，源码开源，二创随意。BepInEx 5 / C# / Unity Netcode 漏洞利用 - AIN-sch/hyena-quest-cheat

Contribute to VENKATESH8518/Vulnerability-Scanner development by creating an account on GitHub.

SecAppliance is a professional-grade network security scanner designed for automated vulnerability assessment and reconnaissance. - KyrilosKamal/SecAppliance

Contribute to enhansome/enhansome-yara development by creating an account on GitHub.

Detection Rules in Sigma (yaml format), Yara etc etc - mohman23/DetectionEngineeringAndThreatHunting

Non-destructive detector for CVE-2026-64638 (XSS2Shell) — WordPress pre-auth XSS reflection primitive - SanaullahAmanullah/xss2shell-check

Contribute to azfrf/Rce-Exploit-r3D-444 development by creating an account on GitHub.

XSS_Scanner 是 Burp Suite 的 XSS 自动化检测插件，支持反射 / DOM 型 XSS 扫描，集成 Payload 注入校验与 AI 判定，高效发现 XSS 漏洞。 - zalazp/XSS_Scanner

Stored XSS, self-propagating worm, CSRF/CSP, and SQL injection on SEED Labs - PasqualePaoloSilvenni/web-app-security-lab

x86/x64 stack-overflow exploitation with pwntools and gdb - PasqualePaoloSilvenni/binary-exploitation-lab

A Python-based web vulnerability scanner that checks HTTPS and common security headers to identify basic web security issues. - nimmalavarsha/vulnerability-scanner

本仓库用于收集和整理各类安全漏洞的POC及漏洞利用的EXP，服务于公司内部安全研究、渗透测试能力提升和漏洞应急响应等相关网安技术 - RBKD-SEC/nanrui_POC