victim’s digital banking account, the attacker feeds the OTP bot with the consumer’s phone number and the name of the bank. These inputs prompt the OTP bot to initiate a call to the victim and dupe...

Project 2 CCIT FTUI. Contribute to ramveil/SQL-Injection-and-Stored-XSS-Vulnerabilities-in-BEM-Web-Apps development by creating an account on GitHub.

CVE-2026-31413: BPF verifier soundness bug - container escape exploit - Rat5ak/bpf-research

Yapper Phone — the world's first Health Communications Technology app. Time-bound calls, in-call focus audio, consensual recording, and ICE emergency bypass, built for ADHD, autism, and hea...

Secure, lightweight, and modern PHP-based Google Gemini AI chatbot. Features advanced security measures (CSRF, Rate Limiting, CORS) and file upload support. - AhmetEminKahraman/Open-Gemini-Chatbot-Php

What if a ransom note appears… but the real attack is something you can’t see yet? 👀 I break down a investigation from a simple user report to uncovering C2 beaconing using Proxy Logs + Zeek + RITA...

Contribute to TyrusRC/burpsuite-swiss-knife-mcp development by creating an account on GitHub.

一个面向页面元素、源码实现与接口字段链路追踪的溯源 Agent。. Contribute to SuperKatrina123/TraceFlow development by creating an account on GitHub.

CVE-2026-3805: Use-After-Free in curl SMB connection reuse - heap info disclosure - Rat5ak/CVE-2026-3805-curl-SMB-UAF

Curated security skills for Claude Code & RooCode — IDOR, Auth Bypass, BAC, SSRF testing. One-command install. - timderbak/security-skills-toolkit

ScanPot est une plateforme de cybersécurité web combinant un scanner de vulnérabilités (XSS, SQL Injection) et un honeypot interactif permettant de détecter, analyser et classifier les comportement...

HackTheBox (HTB) writeups and exploit kits: Silentium, VariaType (Avatar), Fries, Interpreter, Pirate, CCTV, DevArea, Garfield, Hercules, Kobold, HiddenPath, LockedAway — CVE-2025-59528, CVE-2025-8...

Contribute to cyberdesu/socrates-exploit development by creating an account on GitHub.

Spoof hardware IDs on Windows 11 by accessing physical memory directly via DMA, bypassing OS and CPU protections using Rust and memprocfs. - paurushrajput/dma-spoofer

Control and manage multiple Windows agents remotely using a multi-threaded C++ and Python administration tool with hybrid C2 communication. - mas153/TaoRAT

AASM extension for business-critical state machines — correct after_commit, audit trail, bypass prevention, and guard ordering - yash-srivastava19/aasm-core

Just another repository to learn about PHP webshells - IvanT7D3/PHP-Webshells

Lab simulasi Active Directory untuk latihan Red Team meliputi enumerasi, eskalasi privilese, lateral movement, dan pemetaan MITRE ATT&CK dalam lingkungan terisolasi. - dimasqiramadhani/acti...

Hardening a known vulnerable ssrf-ring utilizing AI. - skillkraftz/ssrf-ring-dojo

A self-hosted, web-based security scanner for PHP/HTML/CSS/JS codebases and live URLs. Combines SAST (static taint analysis, secrets, config, deps) and DAST (header audits, safe reflection checks, ...

Contribute to Swarnadip-Kar/xss-attacker development by creating an account on GitHub.