Burpsuite Extension - Cryptod decrypts and re-encrypts AES ciphertext inline while you test, so you do not have to copy ciphertext out to an external tool. - justakazh/cryptod

Self-hosted AI web-app vulnerability scanner — HPE Private Cloud AI framework - mlyu2000/ai-vulnerability-scanner

My penetration testing dashboard - runs nmap scans, msf exploitation, and loot the information in an easily digestible browser-based workflow. - Null-H3x/h3x-dash

Defensive NGINX CVE-2026-42533 map regex risk audit with config scanner, Splunk/Defender notes, and lab evidence. - srkyn/nginx-map-risk-audit

Proof-of-concept exploit for CVE-2026-63030, a pre-authentication vulnerability in WordPress (versions 6.9.0 through 7.0.1). - administrator-01001/CVE-2026-63030

A C2 Framework (for proof of concept). Contribute to ebx32/higgsc2 development by creating an account on GitHub.

Python reimplementation of SHIRO phoneme-to-speech alignment toolkit for Japanese singing voice - wavtechyukky/pyshiro

Template-based, modular, multi-language, shellcode obfuscator and compiler - dodokaicho/staticbypass

WinDbg JavaScript extension for x86 exploit development using pattern matching, ROP scanning, format-string payload generation, and shellcode encoding from the dx evaluator. - rogdooley/osed-windbg

A hands-on Spring Boot microservices playground for experimenting with production-grade distributed-systems patterns — service discovery, API gateway routing, centralized configuration, event-drive...

Contribute to joaovicdev/EXPLOIT-CVE-2026-63030 development by creating an account on GitHub.

Hermes 一体化爬虫 MCP 服务：单进程 FastMCP + Scrapling 三层抓取 + PostgreSQL 缓存 + SSRF 防护 - majehuang/h_claw

Contribute to lightrun-platform/weblogic-poc development by creating an account on GitHub.

SOC investigation of a suspected lateral movement attack using Sysmon, Windows Event Logs, Elastic SIEM, and MITRE ATT&CK to analyze Living-off-the-Land (LotL) activity and reconstruct the ...

Bare-metal cybersecurity & edge telemetry engine. Bypasses Python interpreter bottlenecks using native C-Bridges, SIMD bitwise vectorization, and cache-aligned memory blocks for sub-millise...

Authorized bug bounty & security research writeups — methodology, recon, and detection-bypass case studies. - afuckingco/security-writeups

WordPress Core Unauthenticated RCE (CVE-2026-63030, CVE-2026-60137) - 0xjessie21/wp2shell-checker

Detect & clean up wp2shell (CVE-2026-63030) WordPress compromise — bulk-runnable, read-only by default - InstaWP/wp2shell-scan

FreePBX 未认证SQL注入导致远程代码执行，FreePBX 15 (低于 15.0.66)、16 (低于 16.0.89)、17 (低于 17.0.3)。该漏洞位于商业化“endpoint”模块中，因对用户输入过滤不严，允许未认证的攻击者绕过管理员权限，执行SQL注入，并最终实现远程代码执行 - Neobee714/CVE-2025-57819-POC

A comprehensive and growing web vulnerability scanner that aims to provide a professional report at the end of scanning - MacTash/web-cross

A Python-based Web Vulnerability Scanner that detects basic Reflected XSS vulnerabilities in authorized web applications. It analyzes responses, identifies potential vulnerabilities, and generates ...