A lightweight Command & Control (C2) architecture implementation in Python. Designed to demonstrate client-server socket communication and remote shell execution for Red Teaming educational...

YARA rule set for malware detection. Contribute to mhebert-security/yara-rules-malware-detection development by creating an account on GitHub.

Scan a file for malware from your terminal. Automated malware analysis sandbox CLI with hypervisor-level agentless dynamic analysis, BYOVD kernel driver analysis and AI-assisted reporting. pip inst...

Generate free GTA 6 Steam keys in 2026 with our working, fast, and secure key generator for Windows. - arguslacrimalduct7914/GTA-6-Steam-Key-Generator-Free-2026

Zimbra Collaboration Suite RCE — SMTP log poisoning → swatchdog → OS Command Injection (CVSS 8.9, CISA KEV) - juanpoch/CVE-2026-73570

Contribute to eddinos2/CVE-2026-28956-jxl-messages-surface development by creating an account on GitHub.

Grafana SQL Expressions Arbitrary File Write to RCE - atiilla/CVE-2026-27876

Fetch an SVG from a URL and render it as a real, styleable React element, sanitized by default, works in RSC and the browser. - akhiakl/svgin-react

Contribute to jhonny606/mybeehome-stored-xss-2025 development by creating an account on GitHub.

Advisory: Cute Editor 6.4 reflected XSS via 'Theme' parameter in colorpicker_more.aspx - athosgonzaga/CVE-2021-3030

A modular command-and-control framework for red-team operations: a Python C2 engine with a team server, listeners, stagers and pluggable modules, driven from a Django REST API and a Next.js dashboa...

Satori-to-librsvg 0day RCE Chain PoC. Contribute to rafabd1/Rasterfall development by creating an account on GitHub.

Mera project ka naam hai WebSentry – Fast Website Vulnerability Scanner. Yeh ek Python-based tool hai jo websites ki security check karta hai aur unme jo vulnerabilities hoti hain unko identify kar...

Burp Suite extension for SSRF testing with configurable out-of-band (OOB) callbacks — injects canary payloads into headers, query/body/JSON parameters, and logs every request. - DouglasRao/SSRF-Probe

Authorization matrix testing with IDOR detection for Burp Suite - Gconfig/BOLAMatrix-Public-Release

Local, offline antivirus scanner for Windows — hash blocklist, YARA rules and PE/script heuristics, with a security-operations UI. - trentdiko/AVSCAN

依据系统架构设计方案，ReatiWire 是专为 20 人高保密、高频研发小团队打造的私有安全协同工作台与研发直连网关。系统深度融合用户态 WireGuard 协议栈 (tsnet)、私有 DERP 快速熔断降级引擎、LiveKit SFU 选择性转发单元以及本地用户态 SOCKS5 代理网关，实现全链路零驱动提权、1v1 数据面物理零流量与 100M 公网 VPS 带宽确定性受控。 - T...

Burp Suite extension that renders PDF HTTP responses inline using the PyMuPDF (MuPDF) engine — page navigation, thumbnails, zoom, metadata and one-click download. - DouglasRao/Better-PDF-Viewer

A mini vulnerability scanner that detects open ports, identifies outdated software via banner grabbing, flags weak configurations, and generates a report. Built to learn penetration testing &am...

Automated Web Vulnerability Scanner - Community Edition. 22 checks: SQLi, XSS, Command Injection, LFI, Open Redirect, security headers & more. One URL in, full report out. - hacked-oss/BUG_...

This example demonstrates a Server-Side Request Forgery (SSRF) vulnerability using a simple Flask web application. It simulates a server endpoint that fetches content from a user-provided URL witho...