A comprehensive collection of web security vulnerability notes covering concepts, attack techniques, real-world examples, exploitation methodologies, and mitigation strategies for security research...

Damn Small XSS Scanner. Contribute to stamparm/DSXS development by creating an account on GitHub.

Form validation security testing - XSS injection, SQL injection, boundary lengths, special characters. Found real vulnerability: checkout accepts malicious payloads. Playwright + TypeScript. - Djon...

Secure code review of a sample banking application,10 vulnerabilities identified (SQLi, broken access control, XSS, CSRF) via manual review + Bandit, remediated and verified with a re-scan. - amant...

🛡️ Enterprise-Grade Web Security Auditor, Vulnerability Scanner & Dual-Report Engine in Python - Saura0S/AegisWeb

A simple Open-Source C2 framework for Red Teaming labs. - sinyblack59-del/SinyC2

Salesforce DX GitHub Jenkins POC. Contribute to sirfmandeep-coast/sf-github-jenkins-poc development by creating an account on GitHub.

automated Python-based cryptographic data recovery tool designed to mitigate post-exploit ransomware encryption vectors. - emad-123/log4j-ransomware-bruteforcer

Awesome YARA. Contribute to cybersecurity-dev/awesome-yara development by creating an account on GitHub.

Self-hosted canary tokens and honeypots — free edition of the Sentinel line - nizartuanku/decoy

Original research and non-destructive PoC for a pre-auth Base64-decoded password stack buffer overflow in Netis NC63 login.cgi - ozcanpng/CVE-2026-76070

Original research and non-destructive PoC for a pre-auth stack buffer overflow via unbounded sscanf scanset in the Netis NC63 ipFilterList handler - ozcanpng/CVE-2026-76071

SecRSS 是一份面向网络安全从业者、研究人员和技术爱好者的 RSS 订阅源合集。内容以安全资讯、漏洞情报和技术研究为主，同时收录了开发、隐私与个人技术博客。 - ZakoSec/SecRSS

npm 安装门禁插件:在 DeepSeek Harness 执行 npm install 前审计漏洞、许可证、体积与包健康度,自动放行/询问/拦截。 - niaccky/dsh-install-guard

One CLI to orchestrate your entire pentest and bug bounty recon workflow. - MikeRoss27/scanforge

Modular security recon & scan orchestrator — nmap, nuclei, subfinder, httpx, Shodan chained into one report. Real tools with pure-Python fallbacks. - OhanyanDavit/z3r0scan

Contribute to OpKnock/c2-beacon development by creating an account on GitHub.

Offensive Windows Privilege Escalation — hands-on study notes: enumeration & methodology, service/scheduled-task misconfigs, UAC bypass, token-privilege abuse, the potato family, kernel exp...

Sliver C2 defense evasion tools and guide for authorized red team engagements - XyrL02/sliver-defense-evasion

Ultimate PS5 Payload Atlas 2026: Auto-Synced Exploit Manager - DeborahO18/ps5-payload-constellation