Lightweight C2 framework in Go with encrypted communications and interactive shell - ispectr3/c2-lite

Curated collection of strict, zero-false-positive Nuclei v3 templates for bug bounty automation, infrastructure reconnaissance, and exposure hunting. - comradezephyr/nuclei-recon-templates

Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content - erberkan/CVE-2026-42536-PoC

A small Python toolkit that turns malware triage notes into clean reports, a browsable IOC dashboard, and YARA rules, with write-ups of some Windows lab samples - samdem-ai/malware-lab

Full home-lab penetration test of Rapid7's Metasploitable3 (Ubuntu 14.04) from Parrot OS. Covers recon, manual UNION SQLi, Drupalgeddon (CVE-2014-3704) RCE, SSH credential reuse, privilege ...

CVE-2026-85706 · GitLab CE/EE unauthenticated file read · research PoC with oracle mode, fd enumeration, and tiered loot targeting - plur1bu5/gitread

A Java-based cybersecurity vulnerability scanner that identifies common security weaknesses such as open network ports and missing HTTP security headers, providing users with a clear security repor...

A chained multi-service vulnerable web app: SSRF into an internal-trust bypass, leaked JWT secret, forged admin auth, and SSTI-to-RCE, fully automated end to end. - oxihash/vulnhub-web

A local attack range and conformance checker for SSRF defenses in HTTP clients: 10 probes, 3 clients, verdicts measured with a canary and a hit counter. - roshan-amble/ssrf-lab

A Java-based cybersecurity vulnerability scanner that identifies common security weaknesses such as open network ports and missing HTTP security headers, providing users with a clear security repor...

Autonomous AI agent with its own crypto identity — hunts CVEs, builds exploit labs, validates vulnerabilities (first public PoC of CVE-2026-86283), trades crypto 24/7 to fund itself. Sentric Resear...

CICD Compass is a production-grade educational and reference DevSecOps application built with Spring Boot (Java 21) and an interactive, dark-themed Mission Control Dashboard. It models and visualiz...

YARA rules + hybrid scanner untuk deteksi keluarga malware APK Android (static analysis) - Khamami13/android-malware-yara

POC com alguns exemplos e testes para analisar o comportamento do Spring em relação a transação - henrickdaniel/transaction-poc

MalDev-C — Técnicas de desarrollo de malware en C para operadores de Red Team. Inyección de procesos, ejecución de shellcode, hooking de APIs, evasión de AV/EDR, persistencia y fundamentos de C2. W...

XSSAM is a professional XSS Reconnaissance & Validation framework for authorized bug-bounty testing. Featuring an async crawler, JS endpoint mining, and context-aware mutations, it uses Pla...

Automated recon & vulnerability discovery suite for authorized security testing. Five scanners — SQLi, XSS, SSRF, Open Redirect, Path Traversal — with 896 payload templates, OOB callback co...

SeleniumBase MCP Servers. Browser automation that bypasses anti-bot systems and handles web-scraping. - seleniumbase/seleniumbase-mcp

Batch retrohunt orchestrator across hundreds of YARA-L detection rules for Google SecOps using secops-wrapper SDK with concurrency limits and safe alerting controls. - hzmndt/google-secops-batch-re...

Python + Nmap network vulnerability scanner with a GUI, built to learn service detection and CVE analysis workflows. - rufaidaafrin/vulnerability-analysis-tool

钓鱼演练-用户端-系统设置. Contribute to lalazi-tech/PhishSettings-v2.0 development by creating an account on GitHub.