SSRF-safe URL validation and bounded, redirect-controlled HTTP fetch for untrusted outbound requests. - anatolyben/safe-fetch-guard

This project is a Python-based vulnerability scanner. It scans a website or IP address to find: Open ports Running services Software versions Known vulnerabilities (CVEs) Risk level Finally, it gen...

FastjsonAutoPwn. Contribute to milantgh/FastjsonAutoPwn development by creating an account on GitHub.

fastjson-1.2.83. Contribute to mua520/fastjson-1.2.83 development by creating an account on GitHub.

A vendor-neutral API traffic decoder for Burp Suite — auto-detects gzip/zstd/brotli, gRPC/gRPC-Web, HTTP chunked, and protobuf/JSON/form/XML, with a rule engine and lossless edit+replay. - th3-bl1n...

Contribute to bytebl33d/SliverLoader development by creating an account on GitHub.

Go-based build program to clone, run modules, and compile custom Sliver client and server binaries. - bytebl33d/SliverCloak

Critical authentication bypass exploit for cPanel/WHM CVE-2026-41940. Leverages CRLF injection in cpsrvd daemon to gain root WHM access without credentials. Includes version detection, verbose logg...

Contribute to 0XFFFF-XD/nuclei-templates development by creating an account on GitHub.

Offensive security techniques including AMSI bypass, EDR evasion, process hollowing, and shellcode loading - SlugRegister/offensive-maldev

The adaptation of TMF-630 REST API Design Guidelines for Spring Web MVC. - opentmf/tmf630-toolkit

Agentic vulnerability scanner that builds the target's environment, runs a real exploit inside it, and watches the vulnerability fire. - 0xsharz/vanguard-agentic-security-harness

Static-analysis malware triage workbench (RF + MLP) with MBC/ATT&CK mapping, campaign clustering, and AI-assisted YARA rule generation — built for AICS-108 - Surajit-Samanta/MalwareLens_AI

yara / sigma. Contribute to elfx32/detection-rules development by creating an account on GitHub.

SockPuppets - WebSocket-based command and control. Not a good C2. - ajm4n/sockpuppets

A keel for human + AI project management. Markdown as the database, Git as the audit log, Python as the constitution enforcer — decisions never forgotten, AI never overreaches, drafts expire. | ...

Proof of Concept (PoC) эксплойт для панели SheetRat, демонстрирующий удаленное выполнение кода (RCE) через комбинацию Path Traversal и DLL Hijacking - whoamicrash/sheetratexploit

Installs Trivy vulnerability scanner on Ubuntu, Debian and CentOS using official Aqua Security repositories. - maniakh/trivy-installer

Contribute to 0xvuln0/C2-Tracker development by creating an account on GitHub.