High-performance multi-threaded web reconnaissance tool. Features advanced HCDN/WAF bypass, SPA baseline detection, and contextual fuzzing logic to identify sensitive leaks without the noise. - asy...

A satirical yet deeply structured technical architecture applying hard sci-fi cosmic game theory to traditional xianxia world-building. Completely transcompiled into obfuscated Daoist terminology t...

A dual-state (vulnerable/secure) e-commerce sandbox built to demonstrate Stored XSS and Session Hijacking data exfiltration. - sreevishnu-sviii/xss-hijacking-demonstration

El exploit para obtener root usado la vulnerabilidad del CVE-2021-4034 o tambien llamado PwnKit el cual permite teniendo un shell hacer una escalada de privilegios siempre y cuando la version de pk...

跨平台进程内存关键字扫描工具，用于应急响应 / DFIR：在进程内存中搜索文本或 HEX 字节（自动多编码 UTF-8 / UTF-16LE / GBK），快速定位发起可疑连接、执行可疑命令的进程。提供 GUI 与纯静态 CLI，支持 Windows 与 Linux（amd64 / arm64，含国产化系统）。 - RynezzZ/MemScan

一个用于 AI 辅助漏洞挖掘的安全约束技能。它限制高危操作、过滤噪音发现，并要求基于可复现证据输出确认漏洞。 - Yliken/safeskills

nuclei templates that extract leaked credential values for geiger triage - puck-security/geiger-nuclei-templates

A plugin for Burp Suite Pro that uses the GraphQL schema to begin Active Scanning the entire endpoint. - FWDSEC/burp-auto-gql

AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services. - zaidanr/AuthMatrix

Unauthenticated PHP Object Injection to RCE in WP Activity Log <= 5.6.3.1 (CVE-2026-54806) - joshuavanderpoll/CVE-2026-54806

Open Source C2 Framework for Authorized Security Testing - Nakano-04/c2-dect-lite

二开dddd攻防信息收集扫描工具. Contribute to ddddpro/ddddpro development by creating an account on GitHub.

POC for CVE-2026-23744 for a python revshell. Contribute to daemoncibsec/mcpExec development by creating an account on GitHub.

CVE-2026-39031 — offline plaintext password recovery for Lansweeper lsrunase 2.0 / lsencrypt 2.0 via a hardcoded RC4 key. PoC + technical advisory. - user6400/cve-2026-39031-lansweeper-lsrunase2-ls...

Vulnerability Scanner. Contribute to Somyaranjan7/SentinelScan development by creating an account on GitHub.

Contribute to 0xgh057r3c0n/CVE-2026-48907 development by creating an account on GitHub.

Passive Windows malware scanner with YARA detection, live threat intelligence feeds, and a real-time Flask dashboard. - nitrofx210/silentguard

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rul...

CyberShield Pro is a Flask-based web vulnerability scanner that performs SSL validation, security header analysis, port scanning, WHOIS lookup, XSS detection, SQL injection detection, risk assessme...

CASxploit – Windows SYSTEM reverse shell tool via PsExec with UAC bypass support. - p1rater/CASxploit

Purple-team threat modeling in the browser. Zero dependencies. One HTML file. Offense and defense on one canvas. - BenjiTrapp/PurpleSkjaldborg