Pizzafy Ecommerce System 1.0 - authenticated arbitrary file upload in save_settings leading to RCE (CWE-434). Security research report + PoC. - leidyardila981-creator/Pizzafy-Ecommerce-1.0-save_set...

PoC for modelscan Joblib detection bypass (CVE-worthy RCE via marshal+types) - jasonmiao0511-hue/modelscan-joblib-bypass-poc

Contribute to juann767/Laboratorio-1-C2 development by creating an account on GitHub.

300pt HTB-style hard web CTF: git leak → JWT forge → Jinja2 SSTI WAF bypass → RCE - Zaid1287/specter-ctf

Rewrite Sliver C2 Implant. Contribute to dn9uy3n/Implant-Rust development by creating an account on GitHub.

Python RCE PoC with reverse-shell listener for CVE-2026-42945 (NGINX Rift) - sec-sys/CVE-2026-42945-Reverse-Shell-POC

Scanner for subdomain takeover and DNS vulnerability - rendidwisa/subreaper

A Python-based vulnerability scanner that scans target websites for common security issues such as open ports, HTTP security headers, SSL configuration, and server information to improve cybersecur...

一个可以代替nmap的侦察工具，还包括简单的弱口令爆破和漏扫功能. Contribute to tiangoujun661/zhenchaji development by creating an account on GitHub.

A Command and Control (C2) framework for Red Teams written in Rust - ctrlc03/the-konqueror-rust

## 📖 简介 SecurityScanner 是一款基于 Python 3.8+ **纯标准库**开发的集成式安全检测 GUI 工具。 对标 Nmap + Burp Suite 的功能集合，全部核心算法手写实现，代码公开透明。 ### ✨ 为什么选它？ - 🔓 **零依赖运行** — 不装任何第三方包也能跑全部核心功能 - 🚀 **10种扫描类型** — 完整覆盖 Nmap 全部 T...

Burp Suite extension to detect missing OWASP security headers - ismailsanan/SecHeaderScout

PoC for modelscan GGUF detection bypass (CVE-worthy RCE via mmap-based pickle injection) - jasonmiao0511-hue/modelscan-gguf-bypass-poc

PoC for modelscan NumPy .npz detection bypass (CVE-worthy RCE via pickle in np.load allow_pickle=True) - jasonmiao0511-hue/modelscan-npz-bypass-poc

A Sliver C2 module for NetExec. Contribute to moerketh/sliver-netexec-module development by creating an account on GitHub.

A hands-on web application penetration testing lab using OWASP Juice Shop, Docker, OWASP ZAP and Burp Suite. The project includes manual testing, OWASP Top 10 mapping, CVSS-based risk rating and mi...

Open detection coverage (YARA, Sigma, KQL) and IOCs for malware campaigns analyzed on meltedinhex.com - meltedinhex/detections

AI-powered automated vulnerability scanner with scalable architecture (FastAPI, Celery, ML service) - PallaviVasanth/vuln-scanner-pro

A web-based vulnerability scanner that detects open ports, weak configurations, outdated software versions, and generates vulnerability reports. - Padmini2007/Vulnerability_Scanner

Authenticated HTTP/REST client as fledge http, with SSRF guards. Complements fledge-plugin-web. - CorvidLabs/fledge-plugin-http

Crystal Palace Kit, Sleep Mask Kit, and Loader Kit for Sliver C2 - panwnvda/Sliver-Evasion-Suite