Agentic vulnerability scanner that builds the target's environment, runs a real exploit inside it, and watches the vulnerability fire. - 0xsharz/vanguard-agentic-security-harness

Static-analysis malware triage workbench (RF + MLP) with MBC/ATT&CK mapping, campaign clustering, and AI-assisted YARA rule generation — built for AICS-108 - Surajit-Samanta/MalwareLens_AI

yara / sigma. Contribute to elfx32/detection-rules development by creating an account on GitHub.

SockPuppets - WebSocket-based command and control. Not a good C2. - ajm4n/sockpuppets

A keel for human + AI project management. Markdown as the database, Git as the audit log, Python as the constitution enforcer — decisions never forgotten, AI never overreaches, drafts expire. | ...

Proof of Concept (PoC) эксплойт для панели SheetRat, демонстрирующий удаленное выполнение кода (RCE) через комбинацию Path Traversal и DLL Hijacking - whoamicrash/sheetratexploit

Installs Trivy vulnerability scanner on Ubuntu, Debian and CentOS using official Aqua Security repositories. - maniakh/trivy-installer

Contribute to 0xvuln0/C2-Tracker development by creating an account on GitHub.

Authenticated REST API extension for Burp Suite Professional using Kotlin, Montoya, and Javalin - xhzeem/burp-omniapi

Remote Sunrise Helper for Windows 2026.14 - Unauthenticated Remote Code Execution - blue0x1/Remote-Sunrise-Helper-for-Windows-RCE

🐍 Snaky C2 — Next-gen Windows EDR evasion & Red Team C2 framework based on Rust & Nim (Indirect Syscalls, KCT Hijacking, LSB Steganography) - uzokingkong/SNK-RAT

本程序为美国NSA的方程式工具包图形界面版，由ABC_123于2017年开始编写，仅用来扫描和验证MS17-010、MS09-050、MS08-067漏洞，并可协助管理员修复系统漏洞。 - abc123info/EquationToolsGUI

Modulo Red Team: simulacion de adversario, MITRE ATT&CK, infraestructura C2, post-explotacion y OPSEC. - juanmalbran/Red-Team

ssrfceptor by b0dj0x. Contribute to b0dj0x/ssrfceptor development by creating an account on GitHub.

Self-hosted favicon resolver with an SSRF-hardened fetch boundary. Resolves a domain's real favicon server-side so lookups never leak to a third party. - ciphera-net/sigil

Authenticated REST API and MCP bridge for Burp Suite using Kotlin and Montoya - xhzeem/burp-omnibridge

log4jscan by b0dj0x. Contribute to b0dj0x/log4jscan development by creating an account on GitHub.

Lightweight macOS persistence scanner + YARA pipeline (report-only, sample-safe) - tikket1/macscan

Portable Windows x64 Rizin with Ghidra, jsdec, and RetDec decompilers, YARA scanning, and FLIRT signatures. - JerryLinLinLin/rizin-win64-bundle

Contribute to JoJenH/fastjson-rce development by creating an account on GitHub.