🛡️ Safe Kubernetes sessions for AI agents. Contribute to kubeply/kply development by creating an account on GitHub.

YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA - CybercentreCanada/CCCS-Yara

Behavioural traffic mimicry C2 transport plugin for Sliver - Emul4nt/echolalia

A deliberately vulnerable Java Maven application showcasing common insecure dependencies and unsafe deserialization patterns (Jackson, SnakeYAML, Log4j, Commons-Collections). Designed for security ...

Open source ASM using only free tools. Searches for subdomains, checks life hosts, scans open ports, runs nuclei templates, pulls known emails, and pulls breached creds from free sources. - DerekHa...

All Nuclei Templates. Contribute to adampielak/nuclei-templates development by creating an account on GitHub.

Simple xss vulnerable web forum application aimed to test ways to execute stored xss attacks - anderson2dev/xss-lab

Contribute to 0x00phantom-hat/Hoverfly-1.11.3-RCE-CVE-2025-54123-Exploit development by creating an account on GitHub.

Contribute to LeenearKeenear/yara-grep development by creating an account on GitHub.

PoC — WonderCMS 3.6.0 Stored XSS (GHSA-5x7j-xjpx-pmm5) - BlessedOn3/poc-wondercms-360-xss

KVC enables unsigned driver loading via DSE bypass (g_CiOptions patch, skci.dll hijack, SeCiCallbacks redirection) and PP/PPL manipulation for LSASS memory dumping on modern Windows with HVCI/VBS. ...

PoC — iabdullahmumtaz/DeployHive Unauthenticated RCE via Docker + npm (CVSS 10.0) - BlessedOn3/poc-deployhive-unauth-rce

PoC — pqhaz3925/ccweb Unauthenticated RCE via Claude Code (CVSS 10.0) - BlessedOn3/poc-ccweb-unauth-rce

Next-generation TCP/IP fingerprint alignment platform. Bypass Cloudflare, Akamai, Imperva & F5 WAF with uTLS JA3/JA4 spoofing, TCP/IP SYN tuning, HTTP/2 stream manipulation, and global DNS ...

loader. Contribute to 6K4P-lamp/simple_shellcode_loader development by creating an account on GitHub.

Perform mutation testing on individual Java files with coverage analysis and differential mutation to improve test effectiveness efficiently. - tonguingandgroovingplanevulvitis603/mutate4java

Burp Suite extension + CLI that scrubs client identity (hostnames, IPs, brand names) from pentest traffic before it reaches AI assistants. Drop-in Claude Code hook integration. Java 17, no Python. ...

CurlCraft lets you paste any cURL command directly into Burp Suite and send it to Repeater or Intruder in one click — supporting REST, SOAP, GraphQL, multipart, and URL-encoded requests out of the ...

Windows 10/11 双网卡(外网+内网)路由一键配置与恢复工具，纯 Python 标准库 + tkinter GUI，支持自动备份/恢复、UAC 提权、DHCP 默认路由守护 - MushGrowth/dual-nic-route-tool

PoC and Security Advisory for Typecho GetText Plural-Forms eval() Remote Code Execution (CWE-95) - dudu88485n-ctrl/Typecho-GetText-eval-RCE-PoC

Open-source ICS/OT detection rules (Wazuh + Sigma) for Modbus, DNP3, IEC 104, MQTT, and OPC-UA — tested against a real OpenPLC + GNS3 digital twin lab. - Sbharadwaj05/ot-sentinel