You didn't think I'd go and leave the blue team out, right? - Purp1eW0lf/Blue-Team-Notes

Native stdio MCP server for Kali Linux pentesting - 72 typed tools, structured JSON output, engagement session state, Sliver C2, desktop interaction, tunneling. Authorized testing only. - puffert/k...

A box that can be used to reverse malware that contains several unpackers, binary analysis tools, yara signatures etc. - sjuma-sys/PodmanReversingBox

Local-first VAPT orchestration platform. 57 security scanners, encrypted at rest, zero cloud. Built for real pentest engagements. - mrQhere/SecurityManagementPlatform

Ghost Mythic C2 payload type container — builds Ghost implant as EXE, DLL, or shellcode - cuadr0x/ghost-mythic

Joomla RSFiles 未授权文件上传CVE-2026-57827检测&利用脚本. Contribute to jjkk123123/CVE-2026-57827 development by creating an account on GitHub.

🦠 YARA scans, easy & optimized. Full pipeline from fetching latest rules to extracting flagged artifacts for deeper analysis. Windows & GNU/Linux. - hbourget/YAREX

HTB OneTwoSeven full walkthrough: deterministic creds, chroot symlink escape, rewrite-rule bypass RCE, CVE-2024-1086 to root - dopaminauta/onetwoseven-writeup

Explain any lockfile change before you merge it — bumps, breaking jumps, new vulns, release ages & deprecations across 30 lockfile formats + SBOMs. CLI, GitHub Action, browser playground, a...

覆盖移动端应急响应、溯源分析、证据提取和取证研究. Contribute to SecLeap/mobile-forensics development by creating an account on GitHub.

CVE-2026-70559. Contribute to codeb0ssx/CVE-2026-70559-PoC development by creating an account on GitHub.

Burp extension for per-domain TLS fingerprint spoofing. Evade WAF fingerprinting across Proxy, Repeater, Intruder and Scanner. - Robin528919/burp-awesome-tls

CVE-2026-44613 - Draft or TODO. Contribute to HORKimhab/CVE-2026-44613 development by creating an account on GitHub.

A Python-based Vulnerability Scanner with GUI that scans open ports, grabs banners, detects software versions, checks vulnerabilities, and generates reports. - GURUMAHESHP/Vulnerability-Scanner

一个轻量的 PHP 一句话 Webshell 连接与管理工具，纯 Python 标准库实现，无需安装任何依赖。 面向授权渗透测试与靶场研究场景，除基础的命令执行 / 文件传输外，内置 PHP-FPM bypass 能力：在目标 disable_functions 禁掉全部命令执行函数时，通过直连本机 FPM socket 加载恶意扩展实现绕过 - xy200303/webshell-client

内网资产信息收集. Contribute to keiokr/neiwang_fscan development by creating an account on GitHub.

anggipradana has 8 repositories available. Follow their code on GitHub.

Enterprise DFIR investigation involving phishing, persistence, UAC bypass, credential dumping, lateral movement and ransomware activity using Elastic SIEM. - AlanKxyz/TryHackMe-Boogeyman-3

Lightweight security agent for Linux servers — SSH brute force, WAF, bot detection, Docker/Kubernetes native. Deploy via curl, Docker, Helm. - defensia/agent

CVE-2026-39987 for marimo 0.20.4 PoC. Contribute to alreadyClosed/CVE-2026-39987 development by creating an account on GitHub.

Burp Suite extension: spoof browser TLS fingerprints (JA3/JA4/ClientHello) per domain. Bypass WAF bot detection (Cloudflare etc.) on Proxy, Repeater, Intruder, Scanner. - Robin528919/burp-awesome-t...