- All languages
- Assembly
- AutoIt
- Batchfile
- BlitzBasic
- Bro
- C
- C#
- C++
- CSS
- CodeQL
- CoffeeScript
- Dockerfile
- Elixir
- Go
- HTML
- Hack
- Haskell
- Haxe
- Inno Setup
- Java
- JavaScript
- Jupyter Notebook
- Kotlin
- Lua
- MATLAB
- Makefile
- Meson
- Nix
- OCaml
- Objective-C
- PHP
- Perl
- PowerShell
- Propeller Spin
- Python
- Raku
- Ruby
- Rust
- Scala
- Shell
- Swift
- TSQL
- Tcl
- TeX
- TypeScript
- Verilog
- Vim Script
- Vue
- XSLT
- YARA
Starred repositories
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
A Python pickling decompiler and static analyzer
Security scanner for AI/ML model files. Detects malicious code, backdoors, and vulnerabilities before deployment
Protection against Model Serialization Attacks
主要记录大语言大模型(LLMs) 算法(应用)工程师相关的知识及面试题
Code scanner library for Android, based on ZXing
Simple, safe way to store and distribute tensors
Security scanner detecting Python Pickle files performing suspicious actions
Python toolkit for Chinese Language Understanding(CLUE) Evaluation benchmark
OpenCompass is an LLM evaluation platform, supporting a wide range of models from OpenAI, Anthropic, Gemini, Qwen, GLM, DeepSeek, etc, across 100+ datasets covering knowledge, reasoning, coding, sc…
An LLM-powered knowledge curation system that researches a topic and generates a full-length report with citations.
Reverse engineer anything with agents, from app behavior down to native binaries.
Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode
AFL++ is a state-of-the-art fuzzer, and #1 in benchmarks. It was originally based on AFL. Today it comes with qemu 5.1, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power sched…
一款长亭自研的完善的安全评估工具,支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档
一款内网综合扫描工具,方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
本项目通过大模型联动爬虫,检索Github上所有存有有价值漏洞信息与漏洞POC或规则信息的项目,并自动识别项目的目录结构、Readme信息后进行总结分析并分类,所汇总的项目可以帮助安全行业从业者收集漏洞信息、POC信息、规则等。
SecVulEval is a dataset of C/C++ vulnerabilities.
Benchmark for LLM-based software engineering's ability evaluation on CVE repair.
ARVO: an Atlas of Reproducible Vulnerabilities in Open source software.