Network Port & Vulnerability Scanner is a fast, multi-threaded Python 3 reconnaissance tool designed for Linux systems like Kali Linux. It automates network discovery by identifying active ...

CVE‑2026‑82329 is a critical authentication bypass in JFrog Artifactory (CVSS 9.8) allowing unauthenticated attackers to obtain full administrative privileges. Actively exploited in the wild. Affec...

Sliver GUI 中文汉化版 —— 基于 Wails 的 Sliver C2 桌面操作终端（类 Cobalt Strike）。界面文案已全部汉化为简体中文，功能与上游一致：会话/信标管理、交互式 shell、70+ RPC 命令、Pivot 拓扑图、脚本管理器、战利品/凭据/审计面板等。面向红队/授权渗透测试用途，仅限在已授权环境使用；部分杀软可能将其误报为潜在工具，属正常现象，请加白名...

Contribute to cbeacham0/FalconFlank-Exploit development by creating an account on GitHub.

This is a simple extension . Contribute to shay1995a/Garak_Burp_Extension development by creating an account on GitHub.

PoC for CVE-2026-4813. Contribute to Trachinus/CVE-2026-4813 development by creating an account on GitHub.

Research lab and exploit chain for CVE-2026-75604: path traversal in the Next.js incremental cache, to RCE on Windows. - FORTBRIDGE-UK/cve-2026-75604

Python-based local vulnerability scanner for authorized security assessment - ghogaretejas429-sketch/Vulnerability-Scanner

🧰 CVE-2026-65643 – cPanel Domain Parking RCE Toolkit (CVSS 9.9) | Red/Blue Team suite for unpatched cPanel & WHM 11.x (110,134,136,138). 2 tools: Full Exploit (reverse shell, webshell, pers...

A simple, beginner-friendly, educational Python vulnerability scanner with a Tkinter GUI. It checks whether TCP ports are open on a target you have explicit permission to test, identifies the likel...

Flags an outbound HTTP call using an endpoint parameter validated only with startsWith/contains against a raw URL string. - GapHunterLabs/ssrf-allowlist-bypass-companion

Targeted API Security Assessment: BAC, IDOR, SSRF & SSTI — Redox Engine (Scoped WSTG) - Davit777888/Redox-Web-Security-Testing-Methodology

Burp Suite full-control MCP extension and stdio bridge - rylena/burpsuite-mcp

Automated web application vulnerability scanner with SQLi, XSS, traversal, CSRF, and header detection - d1n35h703/VulnHawk-Pentest

A comics about the latest security incident where a swarm of openai AI agents infiltrate hugging face, how and why - MathFrenchToast/exploit-hf-openai-comics

Root My Galaxy exploit payloads — adds Samsung Galaxy S22+ (SM-S906B, S906BXXSNGZD7, kernel 5.10.237) support - Memetic0/Root-My-Galaxy-Payloads

A beginner-friendly Python vulnerability scanner for detecting basic security issues in a controlled local environment. - shauryagupta0106-bit/basic-vulnerability-scanner

XSS, Session Management & Authentication Resilience Assessment - Loveadeyinka/CIPA14-LAB4

Burp extension client and backend service that will enable two-way communications between Guard and the engineer on web application assessments - praetorian-inc/courier

An advanced Python-based vulnerability scanner with port scanning, service detection, banner grabbing, CVE mapping, risk assessment, reporting, and SQLite integration. - MahmoudAymanNoureddine/Adva...

KWT5H13LD is an open-source blue team security toolkit designed to protect, audit, and harden your infrastructure. One tool for everything — from cloud misconfiguration detection to incident respon...