Educational C2 framework showcasing how legitimate cloud payment APIs can be abused as covert channels. For authorized security research only - infosecninja/StripeDropC2

Sandboxed devcontainer for running Claude Code and Codex in bypass / auto-approve mode. - stefanoginella/aicontainer

System Shell Netcat Command Sender(Exploiting Android Zygote Injection - CVE-2024–31317) - satvikgosai/sysnc

CVE-2026-5364 is a CVSS 8.1 (High) Unauthenticated Arbitrary File Upload vulnerability in the Drag and Drop File Upload for Contact Form 7 - xxconi/CVE-2026-5364

Everything is Pronouns. Spy-Recon has 54 repositories available. Follow their code on GitHub.

A website security testing tool to find reflected and stored XSS vulnerabilities, by brute-forcing each specified parameter. - fadhil-rf12/XSSAudit

Automatic generation of YARA rules from sample files. - YARA-Silly-Silly/yarasilly2

🎯 XSS漏洞演示靶场 - 交互式XSS攻击演示平台，包含钓鱼攻击、Cookie窃取演示，适合安全教育教学 - Guojin0826/xss-lab

A powerful Burp Suite extension for automating complex authentication flows and managing session tokens across multiple user accounts - I-blank-I/COOOKIES

DbGate Unauthenticated Remote Code Execution. Contribute to Nxploited/CVE-2026-47668 development by creating an account on GitHub.

IOC checker for the TanStack/Mini Shai-Hulud npm supply chain attack (CVE-2026-45321) - nkopylov/tanscript-exploit-check

Vengeance Bot is a next-generation, modular command-and-control (C2) framework designed for authorized penetration testing, controlled social engineering exercises, and adversarial simulation acros...

Contribute to EmnaAllegui/C2-beacon-detection-using-RITA- development by creating an account on GitHub.

OS command injection in COMFAST CF-WR631AX V3 router (firmware V2.7.0.8) via the `destination` parameter of the ping_config API endpoint in /usr/bin/webmgnt, leading to remote code execution as roo...

End‑to‑end Metasploitable2 vulnerability assessment covering reconnaissance, exploitation (vsftpd backdoor, distcc RCE, Samba CVE‑2007‑2447), reverse‑shell handling, and Wireshark traffic analysis....

A curated list of awesome YARA rules, tools, and people. - InQuest/awesome-yara

This security task evaluated client-side flaws in DVWA (v1.0.7) across Low, Medium, and High levels. It systematically proved vulnerabilities like Reflected/Stored XSS, cookie theft, keylogging, an...

Contribute to xxconi/CVE-2026-46275 development by creating an account on GitHub.

A fast, interactive terminal UI for monitoring Kubernetes cluster health in real-time - sharat/cluster-cli

本项目是一个专注于网络安全红蓝对抗（Red vs Blue Team）的实战全景展示系统，完整复现了从攻击入侵（红方）到防御溯源（蓝方）的端到端技术流程，并集成各阶段主流工具链与权威跳转链接，打造一站式安全实战演练手册 - acstc/Cyber-Security

Extract and aggregate threat intelligence. Contribute to InQuest/ThreatIngestor development by creating an account on GitHub.