Offensive Security Engineer & Red Team Operator focused on Malware Development, Exploit Development, 0-Day Research, Reverse Engineering, and Advanced Offensive Security. - InayatHussain09/...

A Burp Suite extension that automatically bypasses Cloudflare's "Performing security verification" challenge by relaying requests through a local solver server, so you get...

Unified .NET assembly & shellcode payload builder — msfvenom-style CLI for LOLBin injection (MSBuild, InstallUtil, RegAsm, RegSvcs, CSC, PowerShell, VBScript, HTA, VBA, Workflow Compiler) -...

基于 Python 的 CVE 知识库与智能安全测试工作台，支持漏洞数据同步、检索问答、浏览器流量采集、HTTP 多步流程、多账号复测、批量请求测试、MCP 工具扩展，以及任务证据与报告。 - Andy-over/cve-security-agent

Static malware analysis of 3 disguised phishing droppers (PDF + 2 Word macros) — YARA rules, IOCs, and a Python analysis tool. School project, static analysis only, no live samples included. - alis...

CVE-2026-93453 Exploit — SOGo password reset link poisoning via attacker-controlled Origin header, enabling password reset token interception and account takeover. - Faceless0x7/CVE-2026-93453

Evolution of many vectors in desing chipset I+D. Contribute to lexs201992-gif/DIGITAL_TURBINE_IGNITE development by creating an account on GitHub.

A monolithic, version-agnostic Windows x64 shellcode loader demonstrating hardware Intel CET compliance, module overloading, and dynamic indirect syscalls for clean, fully backed call stacks. - ac1...

蓝队学习笔记，包含Windows/Linux应急排查、端口进程分析、系统日志审计、简单应急响应脚本，用于网络安全蓝队学习。 - YYJYJYVOXDGJ/blue-team-notes

MemoryScope is an automated memory forensics platform that analyzes memory dump files using Volatility 3 and YARA. It identifies malicious processes, hidden activities, network connections, and IOC...

macOS 26.5.2< LPE PoC. Contribute to andrd3v/CVE-2026-43783 development by creating an account on GitHub.

智安Demo：攻防演练、内容审核与漏洞扫描本地产品原型. Contribute to 626zyx/zhian-demo development by creating an account on GitHub.

Undergraduate Seminar — DOM XSS & Trusted Types + ML Classification Pipeline - TheCodeNotTakenT-T/seminar-implementation

Contribute to bughunter24h-cpu/xss-poc development by creating an account on GitHub.

Contribute to control-punk-delete/nuclei-templates development by creating an account on GitHub.

纯 Go 自托管单二进制 C2 平台：HTTP(S)/WSS/gRPC/DNS/ICMP 等九传输信标、载荷工厂、AI 作战台与 Vite 控制台，仅限授权红队测试 - Ruka-afk/forgec2

Contribute to melancholyj1/c2-beacon development by creating an account on GitHub.

Local-only, open-source content blocker for macOS + Android. No backend, no accounts, no sync — DNS-level blocking for adult/gambling/piracy/VPN-bypass, scheduled social media, streaks, and quotes ...

This project demonstrates a practical web security monitoring environment using Apache, ModSecurity, OWASP Core Rule Set (CRS), and Wazuh SIEM. The web server is protected by ModSecurity WAF, whic...

Python XSS scanner with real browser confirmation, tested against Google's XSS Game, DVWA, and OWASP Juice Shop - SashankBista/XSS-scanner