Create a vulnerable bank service and a fishing website to attack user by click link and get their bank session. - tim8912097887-sys/Reflection_XSS_Simulate

Command Claude Code. Conquer. Deploy 4-128 AI agents in parallel from a single terminal. Pre-built operations, agent hierarchy (Opus/Sonnet/Haiku), and military C2 server. - dcarranza-cc/commandcc

Langflow, Remote Code Execution (RCE) via Cron Job Injection through Path Traversal (CVE-2026-5027) - min8282/CVE-2026-5027

A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to ...

Comprehensive security analysis of Model Context Protocol (MCP) architecture, covering core vulnerabilities such as prompt injection, tool abuse, data exfiltration, and SSRF, along with practical d...

Contribute to oudontabetai1-lab/AutoXSScheckTool development by creating an account on GitHub.

【计算机毕业设计_软赛】基于SpringBoot+Vue的同城钓鱼社交APP的设计与开发【毕业设计源码 毕业设计论文 毕业设计完整项目 可运行 二次开发 前后端 毕业设计、本科毕业设计、毕业设计源码、毕业设计论文、java 毕业设计、springboot 毕业设计、vue 毕业设计、wms、仓储管理系统、仓库管理系统、智能仓储、物流管理系统、库存管理、出入库管理、供应链管理、springbo...

唐门·追影 - Windows应急响应与数字取证工具套件 | Incident Response & Digital Forensics Toolkit - tangjie1/tangmen-zhuiying

Langflow, Remote Code Execution (RCE) via Cron Job Injection through Path Traversal (CVE-2026-5027) - EQSTLab/CVE-2026-5027

Hackathon team repository for 0DAY - [hackindia-team:hackindia-spark-6-ncr-central-region:0day] - HackIndiaXYZ/hackindia-spark-6-ncr-central-region-0day

Test of CSRF feature of Vlang's veb. Contribute to teddysasmita/veb-csrf-test development by creating an account on GitHub.

A powerful, stealthy crawler framework with TLS fingerprint bypass, stealth browser automation, and human behavior simulation. - zxygeitio/CrawlForge

A real-time network threat detection and analytics platform that captures live traffic, detects DDoS, port scans, SQL injection, and XSS attacks, enriches findings using OSINT feeds, and visualizes...

Contribute to pranav-dagay/bots-v3-empire-c2-investigation development by creating an account on GitHub.

Contribute to FilipeGaudard/CVE-2026-35045-PoC development by creating an account on GitHub.

MCP server for red team operations — full offensive security lifecycle (21 tools): OSINT, recon, scanning, web app testing, exploitation, post-exploitation, password attacks, and reporting. - AlanK...

HTTP redirect server with request logging; useful for SSRF and redirect-chain testing in lab environments - sidiDev/redirect-server

goauth provides JWT-based authentication with anonymous sessions, refresh token rotation, CSRF protection, and pluggable token storage — without leaking application logic into your handlers. Desig...

ctf rootme eni. Contribute to kent1033/csrf-bankme development by creating an account on GitHub.

A Network Instruction Detection System (NIDS) using Scapy monitors network traffic in real time, analyzes packets, and detects suspicious or malicious commands. It helps identify C2 signals, unauth...

一款高效的 Burp Suite 插件，专注于检测 URL 路径与 XFF 头部潜在的 SQL 注入漏洞，并集成接口自动采集。 - yanxinwu946/Injector---Path-Collector