Detection engine — Sigma and native rule matching plus YARA over a normalized forensic timeline; detections emitted as events. Part of the Citadel suite. - sltcnb/sigil

Infrastructure-as-code deployment and configuration for a Tenable Nessus vulnerability scanner on the nwarila platform. - nwarila-platform/nessus

Oracle WebLogic Console unauthenticated auth bypass + RCE exploit (CVE-2020-14882 / CVE-2020-14750) - hyderpwn/CVE-2020-14882-weblogic

Root My Galaxy SM-S9180 (dm3q) S9180ZHS8FZG1 payload port - CVE-2026-43499 + KernelSU LKM - hackyangwen-lgtm/rmg-s9180-fzg1

Run coding agents in Apple Virtualization VMs whose network egress they cannot bypass. Enforcement lives outside the guest, so it holds even against root with every capability. - satishbabariya/san...

网络安全实验室：漏洞扫描与防御策略. Contribute to Xufazhong/network-security-lab development by creating an account on GitHub.

A web-based vulnerability scanner for authorized security assessments using OWASP ZAP. - Ibrahimx07/Website-Vulnerability-Scanner

Python security tools built from scratch while learning ethical hacking — port scanner, web vulnerability scanner, and password analyser. - Sharan-Ravindran/python-security-tools

Autonomous AI-powered penetration testing agent built with LangGraph and Groq (Llama 3). Automates recon, nmap scanning, CVE lookup via ChromaDB, and exploit planning through a multi-phase reasonin...

APT and DNF repositories for Yara Code. Contribute to vsdudakov/packages development by creating an account on GitHub.

Concorde is an advanced, GUI-based Red Team command and control (C2) framework designed for penetration testers and security professionals. It provides a comprehensive suite of tools for reverse sh...

检查并自动删除完全重复的nuclei poc，也可以设置相似度阈值，匹配相似度删除。. Contribute to BeliefGuy/nuclei_check_repertev development by creating an account on GitHub.

Automated Python XSS Vulnerability Scanner and PHP Remediation Project - pubudud735-dotcom/web-xss-scanner-and-patcher

Zero-trust security guardrails and automated audit tools for AI-generated mobile and desktop apps. Prevents Electron RCE escapes, unsafe IPC channels, plaintext credential storage, and deep link ta...

GitHub-only: Chronicle YARA-L, Splunk SPL, Defender XDR hunting concepts, Gitleaks/Semgrep CI. Not employer production. - kelvinodarikpe88/portfolio-secops-detections

Contribute to dRafaleD/YARA-Learning-Labs development by creating an account on GitHub.

基于社会工程学的弱口令密码字典生成工具. Contribute to WangYihang/pii2pw development by creating an account on GitHub.

Burp Suite JWT auto-refresh extension for Java/Montoya and Jython - gayatricomics-sys/burp-jwt-auto-refresh

An asynchronous Web Application Vulnerability Scanner designed to automate the discovery of common web security flaws, including **SQL Injection (SQLi)**, **Reflected Cross-Site Scripting (XSS)**, ...

A Python based Vulnerability Scanner developed as an internship mini project. The tool scans common ports, identifies running services, detects basic security weaknesses, and generates a vulnerabil...