PhantomLink - A Python-based Command & Control (C2) framework and Remote Administration Tool (RAT) designed for educational research, red teaming, and security auditing. - LethimCookMyBro/Link_all

CVE-2026-54390 — JTL Shop Smarty SSTI RCE | Pre-Auth Template Injection via fetch('string:' . ) | 5.2.0-5.7.1 - shinthink/CVE-2026-54390

APICollector is a comprehensive, open-source Burp Suite extension designed to supercharge your API security testing workflow. It bridges the gap between API development tools (Insomnia, Postman, Op...

Detection rules, Sigma rules, YARA rules, KQL queries, and security analytics. - noelmulkeycyber/detection-engineering

Exploitability PoC for CVE-2026-9558 (SSTI Mautic Theme) - covepseng/cve-2026-9558-poc

Use Sysdig Secure as a plug-in vulnerability scanner in the Harbor registry - sysdiglabs/harbor-scanner-sysdig-secure

A webiste vulnerability scanner, the front end is built in NextJS Typescript, and the backend is built in Python (FastAPI). Authentication is also incorporated with Auth0. - joshua95-web/phoenix-vu...

Contribute to stenlan/xss-poc development by creating an account on GitHub.

First-principle security research — HWBP tamper bypass, TOCTOU quarantine race, AMSI/ETW evasion. OCCUPATION FORCE CALLSIGN GSW PTY. LTD. - rainfantry/22sd-research-findings

A BurpSuite extension that applys sequences of encode/decode operations before pasting clipboard text to a request editor - rhburt/Paste-Encoder

Extend Burp Suite functionality with a curated collection of scripts, custom extensions, and practical guides for security researchers. - Tianna94/burpsuite-executor-scripts

Abyssal is a high-performance Telnet vulnerability scanner for CVE-2026-24061, delivering root shells on vulnerable systems with false-positive detection. - stoerti2/Abyssal

Practical Burp Suite script collection with ready-to-use automation, extension samples, and security testing utilities gathered in one repository. - walkerevan87/burp-executor-scripts-2026

CVE patch: CWE-502 XMLDecoder RCE in miglayout-core 5.3 (NV-001261) - akashgit/nv-001261-miglayout-core

一个自用的cve收集爬虫 主要爬取www.cvelogic.com的昨天高危cve漏洞 输出hcml和md文件 因为作者打开hcml用浏览器翻译 - QWQERw/cve_reports-cve-

Hive C2 Framework. Contribute to cyber-green/hive development by creating an account on GitHub.

AOMEI Cyber Backup Advanced Security Bypass 2026 Update - vsd2030/aomei-cyber-backup-legacy-repo

Writeups from PortSwigger Web Security Academy labs exploiting UNION-based SQL injection (Oracle) and DOM-based XSS via document.write, with root cause analysis and fixes. - marz-w/sql-injection-xs...

Python-based web vulnerability scanner that detects missing security headers, exposed directories, and admin panels. Generates professional HTML risk reports. - Apua7/cybersec-vuln-scanner

Apollo Ultra is an enterprise red team AI engine for OpenCode. It provides autonomous exploitation (24 exploits), weighted attack graph analysis, unified C2 (MSF/Sliver/Covenant), credential vaulti...

Security-focused ASP.NET Core capstone (Coursera Microsoft Full-Stack, Course 8): allow-list input validation, parameterized SQL, bcrypt auth + RBAC, and a live SQL-injection / stored-XSS audit con...