Burp Suite extension that turns a request or response into a clean, report-ready PoC screenshot: hides browser noise headers, blurs secrets, removes lines. Repeater, Logger and Proxy. - Ginnz1337/B...

A C2 Framework (Command & Control) tool developed for red team operations and educational research. It uses Telegram as its C2 channel and encrypts data with a Base64 + XOR combination. -...

Burp Suite extension that automates SQL injection detection (error/boolean/time-based, confidence-scored), WSTG-INPVAL-05. Detection only; exploitation stays manual. - Wu-Falin/burp-sqli-detector

Autonomous agent that mines Java deserialization gadget chains from any JAR directory. Static bytecode analysis + dynamic JVM probes + dual-model adversarial auditing → weaponized PoC. Solving the ...

The Smart AI Pentesting Agent is an automated vulnerability scanner that combines traditional payload-based testing with intelligent detection mechanisms. It can identify: SQL Injection (Error-base...

Documentation on my experience writing my first working position independent shellcode for windows from scratch using x64 assembly - wizardy0ga/coding-my-first-position-independent-shellcode-for-wi...

Lightweight C2 framework in Go with encrypted communications and interactive shell - ispectr3/c2-lite

Curated collection of strict, zero-false-positive Nuclei v3 templates for bug bounty automation, infrastructure reconnaissance, and exposure hunting. - comradezephyr/nuclei-recon-templates

Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content - erberkan/CVE-2026-42536-PoC

A small Python toolkit that turns malware triage notes into clean reports, a browsable IOC dashboard, and YARA rules, with write-ups of some Windows lab samples - samdem-ai/malware-lab

Full home-lab penetration test of Rapid7's Metasploitable3 (Ubuntu 14.04) from Parrot OS. Covers recon, manual UNION SQLi, Drupalgeddon (CVE-2014-3704) RCE, SSH credential reuse, privilege ...

CVE-2026-85706 · GitLab CE/EE unauthenticated file read · research PoC with oracle mode, fd enumeration, and tiered loot targeting - plur1bu5/gitread

A Java-based cybersecurity vulnerability scanner that identifies common security weaknesses such as open network ports and missing HTTP security headers, providing users with a clear security repor...

A chained multi-service vulnerable web app: SSRF into an internal-trust bypass, leaked JWT secret, forged admin auth, and SSTI-to-RCE, fully automated end to end. - oxihash/vulnhub-web

A local attack range and conformance checker for SSRF defenses in HTTP clients: 10 probes, 3 clients, verdicts measured with a canary and a hit counter. - roshan-amble/ssrf-lab

A Java-based cybersecurity vulnerability scanner that identifies common security weaknesses such as open network ports and missing HTTP security headers, providing users with a clear security repor...

Autonomous AI agent with its own crypto identity — hunts CVEs, builds exploit labs, validates vulnerabilities (first public PoC of CVE-2026-86283), trades crypto 24/7 to fund itself. Sentric Resear...

CICD Compass is a production-grade educational and reference DevSecOps application built with Spring Boot (Java 21) and an interactive, dark-themed Mission Control Dashboard. It models and visualiz...

YARA rules + hybrid scanner untuk deteksi keluarga malware APK Android (static analysis) - Khamami13/android-malware-yara