Brauser - Sandbox Lab Browser: browser + security lab + sandbox. One-click site audit (TLS, headers, cookies, XSS, SQLi, ports, admin panels, exposed files), trust score 0-100, RU/EN interface. - E...

MCP server to give Claude a headless browser. It includes OAuth 2.1 for security and checks for prompt injection attempts. Every render request goes through a DNS pinned egress proxy, and the proje...

Verified test corpus and harness for SSRF allow/deny filters — built around what the WHATWG URL parser normalises before your filter runs, and the IPv6 transition forms it doesn't. - Young-...

Offline Ivanti Connect Secure evidence checker for CVE-2026-104935. Connect Secure build and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads. - CompleteTech-Se...

First offensive security framework for Model Context Protocol (MCP) — AI agent protocol vulnerability scanner, auditor, and exploitation toolkit - p17433308-cmyk/MCPwn

PHP2Shell CVE-2026-109618 / CVE-2026-109619 Mitigation work (Ansible Role) - axisops/CVE-2026-109618-109619

Modular ransomware simulation & C2 framework for authorized red-team labs — ChaCha20-Poly1305, X25519 ECDH + PSK mutual auth, wxWidgets ransom screen - zer0crypt02/Wasp-Hive

Research and full exploit chain for a qemu nvme guest to host 0day I discovered - 0xIcarus/qemu-nvme-escape

Burp Suite Extension that repeats HTTP requests until something fails - eric-m-holub/request-incubator

PoC: download-artifact zip traversal -> privileged workflow_run RCE (cloudflare/kumo docs-preview-post-build) - PDFtoMark/gab-poc-artifact-traversal

Contribute to aymencdm/CVE-2026-115926-free5gc-bsf-missing-auth development by creating an account on GitHub.

Contribute to aymencdm/CVE-2026-115925-free5gc-root-ca-key-exposure development by creating an account on GitHub.

Contribute to sec-aceh/Lab-DVWA-Stored-XSS development by creating an account on GitHub.

Contribute to sec-aceh/Stored-Cross-Site-Scripting-XSS- development by creating an account on GitHub.

“Lightweight, simple, and fast”—these are our core motivations in developing Blackout C2 Lite. Blackout C2 Lite is a next-generation C2 framework that you can use in red teaming and CTF activities....

Patent implementation: adaptive malware operational-state determination with dynamic telemetry reconfiguration. Live analysis console, static analysis (PE/PDF/Office/scripts), YARA-X, behaviour rul...

Ansible CVE-2026-109618, CVE-2026-109619 scanner. Contribute to cttynul/php2shell development by creating an account on GitHub.

Contribute to Allen-ux-dev/cve-2026-112621-test development by creating an account on GitHub.

一个人，一整支 AI 安全团队。ArgusAI 集成自主 Agent、多智能体协作、渗透测试、实时 MITM、移动端与二进制逆向、浏览器与桌面控制，从一句话下达目标，到规划、执行、验证与交付 - HG-ha/Argusai

【全链哨兵】全流程渗透测试 Agent 系统，安全服务渗透测试辅助工具，禁止用于非法攻击。. Contribute to zgsfsec/Full-Chain-Sentinel-System development by creating an account on GitHub.

Contribute to aymencdm/cve-2026-92424-content-egg-stored-xss- development by creating an account on GitHub.