Android Security Assessment and SAST Vulnerability Scanner based on OWASP MASVS & Mobile Top 5 - sravanibandreddy/android-application-penetration-testing

GhostJS — ZAP add-on that passively scans JavaScript responses for hard-coded secrets and discovers API endpoints, source maps, and cloud-storage URLs (port of Ghost-Js-Burp-Extension). - ArkhaMahn...

Arbitrary file read in mcp-atlassian via confluence_upload_attachment — CVE-2026-77262 / GHSA-p6hp-93wp-fh6p - romain-deperne/CVE-2026-77262

Reverse engineering and runtime analysis of the PackClient modular RAT framework, including protocol reconstruction, tooling, detections, and reproducible evidence. - ivanimmanuel-dev/PackClient

Cypher Injection in graphiti-core (getzep/graphiti) via unsanitized node_labels — CVSS 8.1 - romain-deperne/CVE-2026-32247

Full build-and-attack writeup for a self-hosted AD lab: domain controller setup, realistic domain population, then a full attack chain against it, SMB/LDAP enumeration, Kerberoasting and ASREPRoast...

Demo: company-standard logging/tracing util lib. Part of a 3-repo chain used to test transitive-dependency vulnerability handling in vuln-remediation-agent. Deliberately depends on a vulnerable log...

Shellcode Injection using WinAPI. Educational research on memory manipulation and EDR evasion techniques. - Michel-DV/Windows-Process-Injector-C

Reverse engineering the Burp project format to create a extractor tool. - parsiya/prub

This interactive suite targets CVE-2014-9222 (Misfortune Cookie) in legacy RomPager web servers, alongside modular testing for CVE-2017-17215 (Huawei HG532 RCE), CVE-2018-14847 (MikroTik WinBox cre...

A behavioral network analysis tool that detects Command and Control (C2) beaconing, DNS anomalies, and known malicious infrastructure in live or captured traffic. - HunterBFranklin/pcap-analyzer

CVE-2026-39987 Proof of Concept. Contribute to stapat1245/CVE-2026-39987-PoC development by creating an account on GitHub.

Amber shellcode unpacker. Contribute to yarienkiva/amber-unpacker development by creating an account on GitHub.

Host-side, domain-allowlisted HTTP proxy for sandboxed child processes. SSRF guard, CONNECT TLS-port allowlist, hijacked-conn drain on Stop. Composes with go-sandbox via env-var injection. - hollis...

Concurrent Java crawler and BM25 search API with bounded jobs, SSRF defenses, PostgreSQL, Prometheus, Docker, and 19 tests. - brohum10/concurrent-web-crawler

Multi-signal C2 beacon detector. Correlates Zeek conn.log, dns.log, and ssl.log to score and rank beacon candidates with per-signal breakdowns and ATT&CK mapping. - 0xPersist/beacon-score

Cross-platform Python framework for automated reconnaissance, attack-surface mapping, security auditing, threat-risk analysis, CVE intelligence, and executive PDF reporting. - Bhuvaneshkumar1/Recon...

由夜安团队研发的AI渗透测试平台，涵盖红队打点、SRC、CTF，特别是在红队领域有极为亮眼的存在. Contribute to xg106265/StrikeAgent_AtkBrain-Flash development by creating an account on GitHub.

工具型智能体 SSRF 实战 PoC：Agent 被说服访问内网/云元数据（零依赖可复跑）. Contribute to shu1371/agentic-ssrf-lab development by creating an account on GitHub.

Port and vulnerability scanner using Nmap. Contribute to kpabellan/port-vulnerability-scanner development by creating an account on GitHub.

Agentic RCE 实战 PoC：工具型智能体命令执行劫持（直接注入+网页诱导，零依赖可复跑）. Contribute to shu1371/agentic-rce-lab development by creating an account on GitHub.