Discover 200+ CTF and bug bounty payloads with 8 categories for fast testing, research, and exploit development - cloudie-w/payload-kit

Contribute to akha-security/akha-xss development by creating an account on GitHub.

Making a code tracker for long term progress bypassing wakatime free limitations. Wakatime is an VS code extension measuring productivity. Essentially using selenium to scrap the data from it daily...

Forensic analysis of an infostealer distributed via a fake Adobe installer, including full multi-stage infection chain and active C2 validation. - thebinaryanalyst73-bit/fake-adobe-infostealer-anal...

CLI tool to convert Burp Suite XML exports to HAR with validation, error handling, and future-proof XML compatibility checks. - xlory04/Burpsuite-HAR-Converter

Contribute to parlakbarann/CVE-2026-30480 development by creating an account on GitHub.

【Hello-CTF labs】一个引导性的SQL注入靶场. Contribute to ProbiusOfficial/sqli-lab development by creating an account on GitHub.

基于Java-Chain的插件，用来生成TongWeb东方通反序列化漏洞Payload. Contribute to Axyanzzzz/TongWeb-PayloadGen development by creating an account on GitHub.

Curated gf patterns for bug bounty — XSS, SSRF, SQLi, LFI, RCE, IDOR, SSTI, redirects, and more - kdairatchi/gf-patterns

Simple CSRF middleware for current axum/tower-sessions. - cavebatsofware/axum-tower-sessions-csrf

SEDAP-Express is an exceptionally fast path/lightweight protocol to integrate new applications, sensors, effectors or other similar things especially into the ecosystem of MESE/UNIITY but not only!...

CVE-2026-34197: Apache ActiveMQ Classic RCE via Jolokia API (CVSS 8.8). Python & Nmap NSE detection scripts. A 13-year-old vulnerability allows remote code execution through the addNetworkC...

This is an agentic AI built system. As I build the forge-c2-go, this is a similar project just AI makes. - wezzels/vigil

CTF-J是一个基于Web的综合学习平台，采用PHP+MySQL+JavaScript技术栈开发。系统包含五大核心模块：用户管理系统（实现注册登录和权限管理）、安全漏洞演示（提供命令注入、文件上传等实战环境）、CTF挑战赛系统（涵盖Basic、Web、Pwn等多种题型）、实时监控系统（用于竞赛考试监控）和学生考试系统（具备防作弊功能）。系统采用响应式设计，支持多主题切换，通过漏洞环境模拟和实...

一款专为攻防演练设计的高性能批量 URL 检测工具，用于快速筛选目标资产并验证其可访问性。通过内嵌浏览器完整渲染技术，帮助安全人员高效识别有效资产和潜在攻击入口 - ca1je/WebCheckV

Contribute to ThePeoplesGunny/Don-C2-KMS development by creating an account on GitHub.

Felles Kotlin-bibliotek for Ktor-apper (RouteUtils, CSRF, AuditLog, TimeUtils) - TommySkogstad/grunnmur-backend

Agents Production Studio 是一个面向 AGENTS.md 生成与维护的浏览器工作台。它通过结构化表单、补充问答、PLAN 预览和结果回看，帮助团队更稳定地收集任务上下文、沉淀约束信息，并产出可复 用、可维护的 AGENTS.md。项目支持可选的模型增强能力，同时保持供应商可替换，适合本地使用、团队协作和轻量生产部署 - lianfei/agents-product...

OMS v3 — 针对多开发者项目、面向 AI 编程协作的仓库内治理框架。文档固化 + 节点化工作流 + 精准上下文注入 + AI 行为约束，让团队协作开发更顺畅。 - Almost42/oh-my-skills

A Nuxt 4 module that integrates html sanitization to automatically clean and secure user-generated content against XSS vulnerabilities with SSR Ready - gunamaya/purrify

Contribute to ThePyroArsonist/RedTeamTools development by creating an account on GitHub.