BeaconatorC2 is a framework for red teaming and adversarial emulation, providing a full-featured management interface, along with a catalog of beacons and a clear schema to add more beacons over ti...

CP 3 :: Web XPL :: SSTI. Contribute to sergio-echigo/xpl_cp3 development by creating an account on GitHub.

Python exploit toolkit for WordPress Crop Image RCE — CVE-2019-8942 & CVE-2019-8943 - SpeatX/Wordpress-Crop-RCE

🔍 Analyze and exploit cross-function reentrancy vulnerabilities in smart contracts to enhance security and prevent critical risks. - lizxyyyc/sc-reentrancy-attack

Android security research — C2 architecture, threat modelling, and defensive analysis. Final Year Project. Documentation only. - 46894-RAFFEY/androspectra-RAT-research

Known C2 infrastructure, mapped and watched — open data for defenders. - doodad-labs/command-server-watch

Roundcube RCE. Contribute to roundcube-utils/roundcube-rce development by creating an account on GitHub.

Cent Nuclei Templates generated through the cent tool. Maintained by HackerWhite. - srkgupta/cent-nuclei-templates

Selected public vulnerability research, CVE writeups, SSRF/parser bypasses, and AppSec findings. - b-hermes/vulnerability-research

Portable Python PoC for CVE-2026-31431 (Copy Fail) - wh1sky02/copy-fail-python

PoC for CVE-2026-42945 (nginx Rift) — heap buffer overflow in ngx_http_rewrite_module. Includes detect/probe/exploit modes, dual-fixture Docker lab, empirical address discovery, OOB-verified offset...

Botnet Komuta-Kontrol (C&C) Altyapısının Sosyal Ağ Analizi Yöntemleriyle Tespiti - CTU-13 Senaryo 6 (DonBot) - NurSenaa/Botnet-C2-Sosyal-Ag-Analizi

Contribute to GRakshita/Shellcode-Loader development by creating an account on GitHub.

Red Team C2 and Post Exploitation code. Contribute to sneakerhax/C2PE development by creating an account on GitHub.

NexusIntel is a modular cyber investigation and intelligence platform designed for OSINT analysts, SOC teams, red teams, and infrastructure investigators. It correlates domains, IPs, ASNs, certific...

SSH honeypot that fingerprints attacker playbooks, enriches with VirusTotal/AbuseIPDB/GreyNoise, and exports STIX 2.1 indicators. - hett-patell/ShardLure

Proof-of-testing coverage tracker for Burp Suite — automatically captures traffic from all tools, classifies testing depth per endpoint, and highlights untested gaps in your scope. - ScopeProof/Sco...

GitHub Enterprise Server Pre-auth RCE via Push Option Injection Scanner - ridhinva/CVE-2026-3854-GHE-RCE

BeyondTrust Remote Support / PRA Pre-auth RCE Scanner - ridhinva/CVE-2026-1731-BeyondTrust-RCE

Curated Linux LPE corpus — 28 modules from 2016 to 2026, with detection rules. One command, safest-first root: skeletonkey --auto --i-know - KaraZajac/SKELETONKEY

Synthetic adversarial telemetry and detection validation pipeline. Sigma rule evaluation, assumption validation, evidence discipline, HTML reports. - GnomeMan4201/shenron