Reproducer for CVE-2026-43867 — Apache Camel camel-pqc AwsSecretsManagerKeyLifecycleManager unsafe key-metadata deserialization (RCE) - oscerd/CVE-2026-43867

1. P（Preparation，准备）：准备阶段，组建应急响应团队，准备工具和文档 2. D（Detection，检测）：检测阶段，确认安全事件是否发生，收集初步信息 3. C（Containment，抑制）：抑制阶段，限制事件影响范围，防止进一步扩散 4. E（Eradication，根除）：根除阶段，清除恶意代码、后门，修复漏洞 5. R（Recovery，恢复）：恢复阶段，恢复系统正...

Unauthenticated Arbitrary File/Folder Deletion in Joomla Helix Ultimate (JoomShaper) <= 2.2.6 — CVE-2026-57830 - Is4yev/CVE-2026-57830

Unauthenticated Stored XSS in Joomla Helix Ultimate (JoomShaper) <= 2.2.6 - Is4yev/CVE-2026-57829

本项目是一个面向 AI Agent 的 Linux 渗透测试技能（Skill），已获得目标机器 SSH 凭证后，自动对目标主机进行全面的安全漏洞发现、利用验证与报告输出 - fatboyer/linux-vuln-discovery

Strix 落地与调教完全指北 —— 这是一个专注于下一代自主 AI 渗透测试代理Strix 的实战部署与性能榨干指南。 以及如何通过 --instruction 指令化身“赛博御兽师”操纵 AI 黑客注意力的进阶玩法的核心沉淀。内含国内网络环境下 Docker 0/33 沙箱卡死究极加速方案，全网最全的多模型（DeepSeek-V4、Claude、火山引擎、OpenRouter）高性价比...

Strix 落地与调教完全指北 —— 这是一个专注于下一代自主 AI 渗透测试代理Strix 的实战部署与性能榨干指南。 以及如何通过 --instruction 指令化身“赛博御兽师”操纵 AI 黑客注意力的进阶玩法的核心沉淀。内含国内网络环境下 Docker 0/33 沙箱卡死究极加速方案，全网最全的多模型（DeepSeek-V4、Claude、火山引擎、OpenRouter）高性价比...

Contribute to sudhansukumarsahoo243-tech/Mini-Vulnerability-Scanner development by creating an account on GitHub.

Contribute to NishantMishra-Dev/Web-Vulnerability-Scanner development by creating an account on GitHub.

渗透项目/渗透工具/脚本文件. Contribute to JY-666-YINZI/sql_inj_test.py development by creating an account on GitHub.

ESP8266 C2 Professional Framework. Contribute to sahik67/esp8266-c2-pro development by creating an account on GitHub.

经典的主机安全/反病毒工具。根据 YARA 规则描述，扫描文件或进程内存，判断是否存在恶意代码、Webshell 或病毒特征。 - Hjyyutr/MoonYara

An antivirus , that scans dedicated folders for threats or malwares , using signature hashing and YARA pattern matching - kanak227/WARDEN

DPI Bypass & Censorship Circumvention Toolkit — 13+ engines, country-aware, self-healing. For Iran, China, Iraq and beyond. - kiacoder/blackout-kit

Shape HTTP traffic in open source C2 frameworks using Malleable C2 profiles to improve communication stealth for red team operations. - Jorrieadvised872/openmalleablec2-v2026

Contribute to addman2/uaf-exploit-cve-2026-23415 development by creating an account on GitHub.

CSTC is a Burp Suite extension that allows request/response modification using a GUI analogous to CyberChef - usdAG/cstc

This repository contains scripts I create for cybersecurity automation. Specifically using bash - codelassey/scripts-and-tools

Reproducer for CVE-2026-46454 — Apache Camel camel-cometd inbound Bayeux header injection (unauthenticated Camel control-header injection → downstream producer steering / RCE) - oscerd/CVE-2026-46454

A Node.js and Express-based web application that demonstrates a Stored Cross-Site Scripting (XSS) attack in a controlled environment. The project simulates how attackers exploit unsanitized user in...

JavaScript malware and vulnerability scanner. Runs untrusted JS in a sandboxed QuickJS-on-WebAssembly runtime under wasmtime, intercepting and observing every API call. - santhreal/jsdet