Go-based build program to clone, run modules, and compile custom Sliver client and server binaries. - bytebl33d/SliverCloak

Critical authentication bypass exploit for cPanel/WHM CVE-2026-41940. Leverages CRLF injection in cpsrvd daemon to gain root WHM access without credentials. Includes version detection, verbose logg...

Contribute to 0XFFFF-XD/nuclei-templates development by creating an account on GitHub.

Offensive security techniques including AMSI bypass, EDR evasion, process hollowing, and shellcode loading - SlugRegister/offensive-maldev

The adaptation of TMF-630 REST API Design Guidelines for Spring Web MVC. - opentmf/tmf630-toolkit

Agentic vulnerability scanner that builds the target's environment, runs a real exploit inside it, and watches the vulnerability fire. - 0xsharz/vanguard-agentic-security-harness

Static-analysis malware triage workbench (RF + MLP) with MBC/ATT&CK mapping, campaign clustering, and AI-assisted YARA rule generation — built for AICS-108 - Surajit-Samanta/MalwareLens_AI

yara / sigma. Contribute to elfx32/detection-rules development by creating an account on GitHub.

SockPuppets - WebSocket-based command and control. Not a good C2. - ajm4n/sockpuppets

A keel for human + AI project management. Markdown as the database, Git as the audit log, Python as the constitution enforcer — decisions never forgotten, AI never overreaches, drafts expire. | ...

Proof of Concept (PoC) эксплойт для панели SheetRat, демонстрирующий удаленное выполнение кода (RCE) через комбинацию Path Traversal и DLL Hijacking - whoamicrash/sheetratexploit

Installs Trivy vulnerability scanner on Ubuntu, Debian and CentOS using official Aqua Security repositories. - maniakh/trivy-installer

Contribute to 0xvuln0/C2-Tracker development by creating an account on GitHub.

Authenticated REST API extension for Burp Suite Professional using Kotlin, Montoya, and Javalin - xhzeem/burp-omniapi

Remote Sunrise Helper for Windows 2026.14 - Unauthenticated Remote Code Execution - blue0x1/Remote-Sunrise-Helper-for-Windows-RCE

🐍 Snaky C2 — Next-gen Windows EDR evasion & Red Team C2 framework based on Rust & Nim (Indirect Syscalls, KCT Hijacking, LSB Steganography) - uzokingkong/SNK-RAT

本程序为美国NSA的方程式工具包图形界面版，由ABC_123于2017年开始编写，仅用来扫描和验证MS17-010、MS09-050、MS08-067漏洞，并可协助管理员修复系统漏洞。 - abc123info/EquationToolsGUI

Modulo Red Team: simulacion de adversario, MITRE ATT&CK, infraestructura C2, post-explotacion y OPSEC. - juanmalbran/Red-Team

ssrfceptor by b0dj0x. Contribute to b0dj0x/ssrfceptor development by creating an account on GitHub.

Self-hosted favicon resolver with an SSRF-hardened fetch boundary. Resolves a domain's real favicon server-side so lookups never leak to a third party. - ciphera-net/sigil