Automated SSRF detection tool — bypass techniques, cloud metadata, OOB confirmation, JSON evidence output - Mostafa-Maklad/SSRF_Hunter

POC to shell execution when importing agent. Contribute to KY64/letta-af-exploit-poc development by creating an account on GitHub.

Zig x64 Windows shellcode loader. Fresh ntdll, indirect syscalls, AMSI/ETW patch. 影に潜む。 - Yenn503/Kage

OneDragon 安全圈一条龙服务，全自动化挖洞，助力挖SRC的赏金猎人白帽子，一键实现子域名扫描，全端口扫描，目录扫描，漏洞扫描。 - possib1e/OneDragon

nix flake combining yara + signature-base. Contribute to karpfediem/yara-sigs development by creating an account on GitHub.

Swagger-ui 反射XSS POC. Contribute to Lq0ne/Swagger-ui-XSS development by creating an account on GitHub.

A stealth-focused Python C2 framework leveraging RPYC and memory-only module loading to provide a completely fileless post-exploitation experience on Windows and Linux. - letho1608/pupy_nextgent

Writeup e exploit da CTF Phantom — cadeia method bypass → SSRF/LFI → PHAR deserialization → RCE. - jvncodez/PHANTOM_CTF_HACKINGCLUB_BY_BSIDESRECIFE

Convert anything, from anywhere — universal file conversion platform (Node.js + FFmpeg/ImageMagick/LibreOffice/Pandoc...). SSRF-protected URL import, 9 categories. - simonpierreboucher02/all-converter

shellcode loader with XOR encryption and EDR evasion techniques. for security research and authorized testing only. - achnouri/Shellcode-EDR-Evasion-Loader

Defensive malware analysis sandbox using Python, YARA, PE analysis, hashing, entropy checks, VM isolation, and HTML/JSON reporting. - Suspecting/MalwareScope

Production-ready Chainsaw SIEM-less threat hunting with Sigma and YARA detection rules for Windows attack chains. 8 Sigma rules + 2 YARA rules with 95% accuracy and complete incident response playb...

Advanced network vulnerability scanner built using Python, Nmap and Flask. - snehachhatri/Network-Vulnerability-Scanner

渗透测试主要步骤. Contribute to huashenzhandouji/Penetration-Testing-basic development by creating an account on GitHub.

nuclei-Templates Snort Signature. Contribute to packetinside/packetinside.github.io development by creating an account on GitHub.

Local, screen-reader-friendly web application pentesting suite — proxy, repeater, intruder, decoder and more — built as semantic HTML5 so NVDA/JAWS/Orca/VoiceOver users get a real Burp alternative....

Burp Suite plugin that provides cyberspace asset search capabilities to AI assistants through MCP protocol - Minshenyao/querySecMCP

C2 server fingerprinter — Cobalt Strike, Sliver, Mythic, Havoc, Brute Ratel - cognis-digital/c2detect

Python tool for analyzing CVE-2018-16763 in FUEL CMS with cleaner response parsing and interactive vulnerability checking. - SOME-1HING/CVE-2018-16763