This course trains cybersecurity professionals to safely dissect, analyze, and neutralize malware like ransomware and trojans. Students build isolated labs, perform dynamic and static triage, and m...

AI辅助SRC漏洞挖掘工作流 - 信息收集/泄露检测/Nuclei/AI分析. Contribute to yuan-Sec/ai-src-hunter development by creating an account on GitHub.

漏洞复现. Contribute to kaoniniang2/fastjson2--exp development by creating an account on GitHub.

Server-Side Template Injection detection & exploitation toolkit - ArmanAbr/SSTI-Exploiter

CVE-2026-68138 Linux Local Privilege Escalation Exploit - jangkrikkbozz/CVE-2026-68138

Cross-platform domain reconnaissance wrapper: one command runs DNS, HTTP, WAF/CDN, TLS, port and nuclei scans, with a graceful fallback for every stage - Lockbearer/easm-recon

基于dsh web实现的工作模式，目的是服务于redteam进行安全研究，覆盖渗透测试、红队评估、代码审计等范围领域，请勿用于非法行为。 - SeaOf0/dsh-redteam-model

An offline, Dockerized web app for teaching reflected XSS → cookie theft → account takeover, with three difficulty levels (Low / Medium / High). - rgsecteam/xss-lab

GAP for ZAP: find the parameters, links and words that may not be obvious. Port of xnl-h4ck3r's GAP Burp extension. - ArkhaMahn/gap

CVE-2026-59310. Contribute to HORKimhab/CVE-2026-59310 development by creating an account on GitHub.

Contribute to ebrahimgh21/SSTI-CHECKER development by creating an account on GitHub.

PipePwned es un laboratorio que simula un entorno CI/CD vulnerable, donde se explota una cadena de vulnerabilidades que incluyen IDOR, SSTI, fuga de información y escalada de privilegios mediante P...

MCP server bridge for DeepSeek Harness: stdio / streamable-http / legacy-SSE transports, web settings UI (form + JSON), tools as mcp__<server>__<tool>. Burp Suite ready ...

ZAP add-on that converts HTTP requests between content types (JSON, XML, SOAP, URL-encoded, multipart form-data, YAML, GraphQL and plain text). Port of h0tak88r's Burp extension. - ArkhaMah...

Using CVE-2026-43499 to root your Galaxy S24 Ultra(SM-S9280 ,(China / Hong Kong SAR / Taiwan)) - NanoTurtle1145/root-my-s9280

Scraper ringan untuk doujin.desu.xxx (API terenkripsi) & nekopoi.care — tanpa dependensi, anti-SSRF, sanitasi URL - kyy0887/doujin-scraper

Zhipu BigModel web fetch provider for DeepSeek Harness (dsh) — delegated web_reader MCP behind a ctx.web WebFetchProvider; SSRF surface nil, session handshake, per-fetch auditing - FWW321/dsh-web-f...

Agentic life cycle for this Spring project POC. Contribute to shrutikulkarni5020/SpringAIJIRAColab development by creating an account on GitHub.

kali-pentest基于《Kali Linux渗透测试的艺术》方法论蒸馏，提供一个可被agent调用的、面向远程Kali Linux渗透测试的完整执行框架。 - githuBlijingai/kali-pentest

UploadSentinel 是一个面向授权安全测试、Web 安全评估和文件上传接口复核的桌面工具. Contribute to HooXuefeng/File-Upload-Security-Testing-Workbench development by creating an account on GitHub.