A vendor-neutral API traffic decoder for Burp Suite — auto-detects gzip/zstd/brotli, gRPC/gRPC-Web, HTTP chunked, and protobuf/JSON/form/XML, with a rule engine and lossless edit+replay. - th3-bl1n...

Contribute to bytebl33d/SliverLoader development by creating an account on GitHub.

Go-based build program to clone, run modules, and compile custom Sliver client and server binaries. - bytebl33d/SliverCloak

Critical authentication bypass exploit for cPanel/WHM CVE-2026-41940. Leverages CRLF injection in cpsrvd daemon to gain root WHM access without credentials. Includes version detection, verbose logg...

Contribute to 0XFFFF-XD/nuclei-templates development by creating an account on GitHub.

Offensive security techniques including AMSI bypass, EDR evasion, process hollowing, and shellcode loading - SlugRegister/offensive-maldev

The adaptation of TMF-630 REST API Design Guidelines for Spring Web MVC. - opentmf/tmf630-toolkit

Agentic vulnerability scanner that builds the target's environment, runs a real exploit inside it, and watches the vulnerability fire. - 0xsharz/vanguard-agentic-security-harness

Static-analysis malware triage workbench (RF + MLP) with MBC/ATT&CK mapping, campaign clustering, and AI-assisted YARA rule generation — built for AICS-108 - Surajit-Samanta/MalwareLens_AI

yara / sigma. Contribute to elfx32/detection-rules development by creating an account on GitHub.

SockPuppets - WebSocket-based command and control. Not a good C2. - ajm4n/sockpuppets

A keel for human + AI project management. Markdown as the database, Git as the audit log, Python as the constitution enforcer — decisions never forgotten, AI never overreaches, drafts expire. | ...

Proof of Concept (PoC) эксплойт для панели SheetRat, демонстрирующий удаленное выполнение кода (RCE) через комбинацию Path Traversal и DLL Hijacking - whoamicrash/sheetratexploit

Installs Trivy vulnerability scanner on Ubuntu, Debian and CentOS using official Aqua Security repositories. - maniakh/trivy-installer

Contribute to 0xvuln0/C2-Tracker development by creating an account on GitHub.

Authenticated REST API extension for Burp Suite Professional using Kotlin, Montoya, and Javalin - xhzeem/burp-omniapi

Remote Sunrise Helper for Windows 2026.14 - Unauthenticated Remote Code Execution - blue0x1/Remote-Sunrise-Helper-for-Windows-RCE

🐍 Snaky C2 — Next-gen Windows EDR evasion & Red Team C2 framework based on Rust & Nim (Indirect Syscalls, KCT Hijacking, LSB Steganography) - uzokingkong/SNK-RAT