OWASP Security Training & Penetration Testing Lab - Ali-hey-0/owasp

I find vulnerabilities in web applications before attackers do. I test web apps, APIs, and mobile apps from an attacker's point of view. I look for flaws like IDOR, XSS, SSRF, CORS issues,...

🚀 A powerful, lightweight tool for detecting and analyzing DOM-based XSS vulnerabilities. - Mehran-Seifalinia/DOMinator

个人准备渗透测试和安全面试的经验之谈，和去部分厂商的面试题，干货真的满满~. Contribute to Leezj9671/Pentest_Interview development by creating an account on GitHub.

Simple shellcode staging loader in Csharp. Contribute to LeDucKhiem/Simple_Staging_Webserver development by creating an account on GitHub.

Contribute to kaleth4/NTLM-Relaying development by creating an account on GitHub.

Advanced AD Offensive Engine. Automates the path from stealthy recon to domain compromise. Features unauthenticated SMB Signing/NTLM Relay audits, ZeroLogon (CVE-2020-1472) hunting, and authenticat...

A structured DFIR playbook for analyzing memory dumps using Volatility 3. This repository provides a question-driven workflow for investigating volatile memory artifacts, suspicious processes, netw...

Contribute to p3ix/nuclei-templates development by creating an account on GitHub.

new nuclei template notifications. Contribute to h4sh5/nuclei-notifications development by creating an account on GitHub.

Contribute to asewmin/nuclei-project development by creating an account on GitHub.

Exploit for CVE-2026-31635 Local Privilege Escalation - Lutfifakee-Project/CVE-2026-31635

Python-based penetration testing framework developed for ethical hacking and network security labs, featuring reconnaissance, scanning, enumeration, vulnerability analysis, and exploitation modules...

Metasploit Exploit DB CVE Coverage. Contribute to znxp/exploit-db-formatted development by creating an account on GitHub.

HOVAX - 45 Modules Security Toolkit for Penetration Testing. Features: OSINT, Web Vuln Scanner (SQLi/XSS/LFI/RCE), WAF Bypass, JWT Cracker, GraphQL Exploit, Spring4Shell, HTTP Smuggling, Parameter ...

Contribute to OriginSecurityX/rill-flow-auth-bypass-aviator-rce development by creating an account on GitHub.

Contribute to ysmn-a/C2-R402 development by creating an account on GitHub.

Generate smart web server redirector configs from a Cobalt Strike malleable C2 profile. Precise beacon matching, clean separation between C2 comms and staging, and aggressive traffic filtering, all...

afrog poc辅助生成yaml工具. Contribute to lenawook313-sketch/afrog-poc-generation development by creating an account on GitHub.

small script for processing fscan output results especially for optimizing output from fscan scans of large asset sets helping you get ahead of the game - Trivexion/FscanOutput-Beautify

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning) - shadow1ng/fscan