PoC for CVE-2026-22738. Contribute to n0n4m3x41/CVE-2026-22738-POC development by creating an account on GitHub.

Go/Gin 后端脚手架 — 分层架构、Wire 编译期依赖注入、JWT 密钥轮转、Casbin RBAC、Redis 缓存/分布式锁、滑动窗口限流、事务性 Outbox、OpenTelemetry 链路追踪、Prometheus 监控 - possibities/gin-core

Blazing Black Dragon – professional web vulnerability scanner with 26 attack vectors: XSS, SQLi, SSTI, LFI, CMDi, CORS, GraphQL, OAuth, subdomains, secrets, ports, SSL, headers, CMS, dir brute, ope...

Contribute to hiamhuy/XSS_exemple development by creating an account on GitHub.

Secure MCP runtime — policy enforcement, SSRF/secret-theft blocking, audit logging - srisowmya2000/mcp-shield

Enables-Cobalt-Strike-to-support-Atexec-plugin-cna - Wamrma/Cobaltstrike-atexec-CNA-plugin

Tool-neutral attack corpus for AI agent egress security - luckyPipewrench/agent-egress-bench

An advanced Windows shell code loader and generator toolset featuring XOR encryption, debug protection, and GUI capabilities for penetration testing. - Drawmwm/WindowsShell-Injector-Shellcode-Loader

Bypass Two-Factor-Authentication. Contribute to Bd-Mutant7/2FAssassin development by creating an account on GitHub.

Automated Vulnerability Research Framework for SSRF & XXE exploitation in AI-integrated applications. - mazen-elgammal10/b-xssrf-framework

基于GitHub Issues API的隐蔽C2框架，支持Windows/Linux，AES-256-GCM加密通信，远程命令执行、文件管理、端口扫描等功能 - Kxiandaoyan/github-C2

CVE-2026-28766: Missing Authentication on User Account Endpoint — Gardyn Home Kit (ICSA-26-055-03) - MichaelAdamGroberman/CVE-2026-28766

🛡️ Expose and analyze hidden URL exploits that enable undetected downloads and drive-by installations of malicious software during online activities. - Apohub55/Slient-URL-Exploit

JAKU (呪) — Autonomous Security & Quality Intelligence Agent for vibe-coded apps. XSS, SQLi, prompt injection, QA testing, and attack chain correlation in one command. - theshantanupandey/jaku

Windows tool for encrypting and loading shellcode in memory for security research and controlled testing. Supports in‑memory execution, payload encryption, and Windows API techniques. Topics: shell...

🛠 Unlock DLC in Microsoft Store and Xbox PC games by bypassing XStore API checks for easy access to content without restrictions. - Fourty4Four/XStoreUnlocker

CVE-2026-28767: Missing Authentication on Admin Notifications Endpoint — Gardyn Home Kit (ICSA-26-055-03) - MichaelAdamGroberman/CVE-2026-28767

CVE-2026-33154(RCE @jinja resolver). Contribute to redyank/CVE-2026-33154 development by creating an account on GitHub.

Contribute to Iagawuqr/bypassmidd---free-bypasser-and-api development by creating an account on GitHub.

基于瞎注(xia_sql)插件使用burp最新API（montoya-api:2026.2）重写版本：SuperSql，并添加[path]扫描模块致力于多sql注入点发现 - GXB-BIT/SuperSql

Deploy Sing-box NaiveProxy with one command, auto TLS via ACME, and generate http2:// links for easy client setup - Wassay380/NaiveProxy