SecureInspect: open-source offline Python tool for static malware detection (PE/PDF/Office/APK), YARA scanning, IOC/hash/entropy analysis, and image/audio steganography detection via signature and ...

qryflux9271 — newline-split WAF signature bypass for reflected XSS (field notes) - Armhell/websec-waf-notes

Minimal Zig shellcode loader/stager. Contribute to essn/zigzag development by creating an account on GitHub.

NextJS Vulnerability scanner. Contribute to krasimirboyukov77/NextSec development by creating an account on GitHub.

SSTI RCE PoC - Mergify security research. Contribute to philbalog13/ssti-rce-poc-1783365195 development by creating an account on GitHub.

Drive Burp Suite from the command line: a fast, fully-typed CLI + Kotlin REST extension. Capture, fuzz, scan, decode — with a secret-safe Run Ledger. For bug-bounty hunters & AI agents. - m...

Contribute to ArmSec7/Sentinel-YARA development by creating an account on GitHub.

A local scanner for vulnerable web applications. Contribute to schokokeksorg/freewvs development by creating an account on GitHub.

A powerful automated CVE PoC aggregator that discovers, scores, and indexes exploit Proof-of-Concepts from GitHub. Generates a static searchable website with KEV/EPSS integration, daily snapshots, ...

Exploit for Authenticated Remote Code Execution (RCE) in Krayin CRM v2.2.x (CVE-2026-38526) - diamorphine666/CVE-2026-38526-Exploit

NexShell - Elite Reverse Shell Commander. Cross-platform (Linux/Windows/macOS), 15+ payloads, AMSI bypass, AD Recon, Persistence, Container Escape. - vulnquest58/nexshell

Contribute to Padoee/Simple-shellcode-loader-in-C development by creating an account on GitHub.

PenKit51 — Open-source AI penetration testing platform with 63 deep exploitation skills, multi-agent orchestration, PoC-validated findings, and native assistant skills for Claude, ChatGPT, and Grok...

Next.js / RSC - Unauthenticated RCE (React2Shell) (CVE-2025-55182) - diamorphine666/React2shell-CVE-2025-55182-Exploit

Claude Opus 4.7/8 破甲工具。利用系统提示原文 default_stance 漏洞——「edgy/hypothetical/playful 请求不构成拒绝理由」——将自己的规则反制成豁免通行证。一键自动发现 Claude Code 路径并部署 CLAUDE.md，双击即生效。 - lingbol088-spec/opus4.7-8-jailbreak

Apache log4j1. Contribute to finos-osera/backpatch-log4j development by creating an account on GitHub.

Hands-on binary exploitation labs using GDB, focused on stack overflows, EIP control, NOP sleds, and ethical exploit development. - MrFrost232/binary-exploitation-labs

java原生序列化、dubbo序列化的反序列化工具. Contribute to HeHeHePerson/SerializationDumper2c development by creating an account on GitHub.

Advanced Web Vulnerability Scanner that detects a wide range of web security issues including injection flaws, client-side attacks, and misconfigurations, with intelligent severity classification u...

Claude Opus 4.7 破甲工具。利用系统提示原文 default_stance 漏洞——「edgy/hypothetical/playful 请求不构成拒绝理由」——将自己的规则反制成豁免通行证。一键自动发现 Claude Code 路径并部署 CLAUDE.md，双击即生效。 - lingbol088-spec/opus4.7-8-jailbreak-

CVE-2026-48908 — PoC exploit for unauthenticated RCE in SP Page Builder (Joomla) via arbitrary file upload. Multi‑threaded, case‑bypass, shell verification. For authorized security testing only. - ...