扫描弱口令. Contribute to xcbillyang/webpassscan development by creating an account on GitHub.

dddd是一款使用简单的批量信息收集,供应链漏洞探测工具，旨在优化红队工作流，减少伤肝的机械性操作。支持从Hunter、Fofa批量拉取目标 - 0neOfU4/dddd

Repository of my YARA rules. Contribute to baderj/yara development by creating an account on GitHub.

Snyk for binaries. Ghidra-backed decompile + AI classification + YARA for npm supply-chain threats. MIT. - ashlrai/binshield

CVE-2026-46680 exploit. Contribute to r0binak/CVE-2026-46680 development by creating an account on GitHub.

A comprehensive WordPress vulnerability scanner and exploitation framework for authorized penetration testing. This tool automatically detects and exploits multiple WordPress security vulnerabiliti...

Automated CVE, exploit & risk intelligence pipeline with GitHub Actions - SreejaPuthan/ICEBERG-Threat-Intel-updator

AI-Powered SIEM Platform is a cybersecurity solution that monitors and analyzes security logs in real time. It uses AI, machine learning, and Sigma rules to detect threats, generate alerts, and aut...

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android - rednaga/APKiD

ShadowRAT is a Remote Access Trojan that uses Telegram as its command and control (C2) channel. It provides complete remote control over a Windows machine through Telegram bot - s-r-e-e-r-a-j/Shado...

Drupal Core PostgreSQL SQL Injection PoC - CVE-2026-9082. Ethical PoC for the Drupal vulnerability allowing anonymous SQL injection through the JSON:API module on PostgreSQL-backed sites. - 7h30th3...

Chrome ANGLE Use-After-Free — 0-day disclosure & public CVE - lylzjnqe/CVE-2026-0908-Chrome-0-day-RCE

Personal profile — Offensive Security Engineer building Sarvanga, Chakravyuh CTF, and C2 Framework - atirathi/atirathi

File triage for CTI and malware analysis: hashes, strings, entropy, metadata, YARA context, JSON and CSV output. - anpa1200/Basic-File-Information-Gathering-Script

Sigma, YARA, ATT&CK Navigator, IOC, and hunt artifacts derived from CTI reports and malware-analysis output. - anpa1200/cti-detection-pack

RedScope AI 是一个面向安全团队、渗透测试、资产侦察、威胁追踪和红队编排的 AI CLI。它基于 Bun、TypeScript、React/Ink 和 MCP 工具生态构建，提供交互式终端助手、非交互式管道模式、多模型 Provider、插件系统、远程控制服务和一套受控的安全工作流脚本 - PuppetWen/RedScope-AI

Capture website sections as PNG — full mode or 16:9 presentation slides. Hardened against SSRF, with HTTP Basic Auth + rate limiting for public deploys. - ericxyz86/html-screenshot

CVE-2026-45829. Contribute to 0xBlackash/CVE-2026-45829 development by creating an account on GitHub.

Piotnet Addons for Elementor Pro <= 7.1.70 - Unauthenticated Arbitrary File Upload → RCE - xShadow-Here/CVE-2026-4885

From the headlines to the SIEM: daily detection content built from public threat intel — Sigma, KQL, SPL, YARA — with attribution, ATT&CK mapping, and false-positive notes. - javierDAW/dete...

The Frank!Framework is an easy-to-use, stateless integration framework which allows (transactional) messages to be modified and exchanged between different systems. - frankframework/frankframework