CSPBypass.com, a tool designed to help ethical hackers bypass restrictive Content Security Policies (CSP) and exploit XSS (Cross-Site Scripting) vulnerabilities on sites where injections are blocke...

太公是下一代红队社会工程学基础设施平台 - 全链路钓鱼演练与风险评估系统。支持邮件/短信/IM多渠道投递，内置AI助手，多样化模板库。 - 25smoking/TaiGong-Project

Linux/Windows post-exploitation framework made by linux user - jm33-m0/emp3r0r

Contribute to xxeneexx/xxenee development by creating an account on GitHub.

This is a Cross Site Scripting Vulnerability scanner script. - Tamim-Haider/XSS-Scanner

🔌 Manage multiple reverse shell connections easily with OnlyShell, the Go-based tool for efficient multi-shell handling and command execution. - blackx1123/OnlyShell

🎵 Inject music and ringtones directly into your iOS device, bypassing iTunes sync for seamless management of your media library. - miroslav1123/ByeTunes

Secure authentication and authorization system built with Node.js, Express, MongoDB, and React. Features JWT access & refresh tokens, bcrypt password hashing, role-based authorization, 2FA,...

Command Injection in grub-btrfs initramfs hook - CVE-2026-25828 - cardosource/CVE-2026-25828

Contribute to Jahia/jahia-csrf-guard development by creating an account on GitHub.

An enterprise adversary simulation lab using Sliver C2 and ELK SIEM to execute and detect MITRE ATT&CK-mapped attacks in a Purple Team environment. - Vivekkarna4/Adv-adversary-sim

Windows Server Active Directory IT automation cybersecurity PowerShell VBScript enterprise IT infrastructure scripting system administration identity management secure environments automation tools...

AI-powered penetration testing framework with hot-reloadable plugins, intelligent WAF bypass, and GitHub Copilot SDK integration. - Htunn/simple-exploit

Webshell Manager Tool/一句話木馬管理工具/Trojan/Backdoor/Pentest - iss4cf0ng/Alien

goauth provides JWT-based authentication with anonymous sessions, refresh token rotation, CSRF protection, and pluggable token storage — without leaking application logic into your handlers. Desig...

🔍 Discover and analyze historical URLs from the Wayback Machine in Burp Suite to enhance your bug bounty and penetration testing efforts. - pbarucco/Wayback-Recon

Contribute to stephaniesahnihi/CVE-2026-24300 development by creating an account on GitHub.

This repository aims to provide the implementers, detectors, and bypassers that are related to LRFP for Android devices, where the abbreviation "LRFP" stands for Low-level, Rootin...

Modified version of cujanovic's dns.py for DNS Rebinding attacks. - intrudir/DNS-Rebinder

Cobalt Strike Aggressor Script for identifying security products on Windows hosts — six enumeration methods rated by noise level, from silent in-process BOF to full PowerShell/WMI. - VirtualAlllocE...

# Defensive Security Hub A curated collection of essential resources, tools, and references for Security Operations Center (SOC) analysts. This repository aims to support your security efforts and...