XSS comand and control with WS. Contribute to CTPache/SOXSS development by creating an account on GitHub.

Comprehensive web application vulnerability assessment covering SQLi, XSS, CSRF, CORS, auth bypass, and misconfigurations. Includes automated scripts and OWASP methodologies. - ganeshkrishnareddy/W...

Advanced Android Security, Threat Hunting & Digital Forensics Framework for authorized device auditing, APK analysis, YARA scanning, evidence-based threat assessment, and mobile DFIR. - 0xh...

FileTrove indexes files and creates metadata from them. - steffenfritz/FileTrove

Intentionally vulnerable web app (Java/JS/SQL): builds+runs in Docker, 28 exploitable vulns, POC exploit suite, reference SARIF + SAST checker. DO NOT DEPLOY. - Vikentiuiy/vulnerable-web-app

Full-stack API vulnerability scanner targeting the OWASP API Security Top 10 with configurable scan modules and a React dashboard. - Tabaxi3000/api-security-scanner

Safe commit - cpp based security vulnerability scanner - dev4nshuu/Safe-Commit

Automated malware static-analysis toolkit: PE parsing, IOC & string extraction, YARA, heuristic threat scoring. DFIR-focused. - sltcnb/Pandora-Sandbox

CVE-2026-63030: WordPress REST batch-endpoint array desync. Mechanism, detection, mitigation, and a safe reproduction lab. - ZenithGenius/wordpress-batch-rce-lab

Python CLI for scanning files against YARA rules to detect malware patterns - FatimaCyberLabs/YARA-Scanner

Educational Python vulnerability scanner featuring concurrent TCP scanning, service fingerprinting, SQLite CVE enrichment, and OWASP mapping. - wittymastodon/lightweight-vulnerability-scanner

Security research notes, CVE walkthroughs, and lessons from 0xNull team — pentesting, OSINT, exploit dev, threat hunting. - 0xnull-sec/sec-notes

DEF CON 34 workshop for redStack: deploy a Mythic/Sliver/Adaptix red team lab on AWS with Terraform and run a full boot-to-breach attack path over OpenVPN. - BaddKharma/redStack-defcon34

Python version of the OpenNetAdmin 18.1.1 RCE that provides a shell - JoeyLipton/OpenNetAdmin-18.1.1-ReverseShell

PoC of getting an RCE on Prestashop with admin credentials - nmagill123/prestashop-admin-rce

Stuff I be lookin @. Contribute to Rat5ak/Rat5ak-Nadsec-2026-CVE-CERTIFIED-HOOD-CLASSICS development by creating an account on GitHub.

The wp2shell vulnerability chain represents one of the most significant WordPress Core security issues in recent years. Because exploitation begins with an unauthenticated request and can ultimatel...

Yara and Yara X Linter . Contribute to ThreatFlux/yrlint development by creating an account on GitHub.

Contribute to Nizar-Lams/Yara-rules development by creating an account on GitHub.

泄露的针对各种 iOS 版本的漏洞利用工具包. Contribute to adoemwanmei/coruna-pro-v2 development by creating an account on GitHub.

Focused XSS fuzz scanner with smart payloads, reflection analysis, CSP checks, WAF hints, DOM sink detection, and optional browser validation. - rafashaalfiandi/XSSentinel