Free open-source IP rotation proxy (SOCKS5/HTTP) + Burp extension for people without money - BlasterX24/ip-rotator-free

这是一个面向多项目维护者的自动化工具，旨在自动处理 Dependabot 和 Code Scanning 产生的大量简单、重复的告警修复工作，如依赖版本升级、安全漏洞修复等，从而显著提升维护效率。 - dependfix/dependfix

Generate YARA rules from Windows API hashes for malware detection and hunting. - tbarabosch/apihash_to_yara

CVE-2025-5781 FreePBX Exploit POC. Contribute to jasonbernier/CVE-2025-5781 development by creating an account on GitHub.

Local-first, modular static malware scanner: YARA, PE/JAR/APK/Office/PDF analysis, safe archive extraction, explainable verdicts, optional hash reputation lookups. - trashdino0/malware-scanner

POC FastAPI librariy application in a Jenkins pipeline to illustrate secured CI/CD, rollback and run-time persistence. - kekcoke/pykins

Tenant isolation, replay protection, signature verification, path traversal, SSRF, redaction, and CI supply-chain boundary tests. - messaging-intel-test/security-boundary-tests

Contribute to 0xSt4rk007/ssrf development by creating an account on GitHub.

A Burp Suite extension for viewing JWTs that actually gives you the space to view them. - zw00sh/burp-jwt-viewer

CVE-2025-55182 — Next.js Flight Deserialization RCE exploit with interactive shell, single-command execution and multi-payload reverse shell chain. For authorized penetration testing only. - dotnet...

Responsible PoC for a missing-authorization-check comment-triggered RCE finding in bazel-contrib/rules_cuda integration-tests.yaml (reported to Google Bug Hunters OSS VRP) - 2423gen-stack/rules-cud...

PortSwigger is the UK-based security research company behind Burp Suite, the industry-standard web and API security testing platform used by penetration testers and enterprise AppSec teams worldwid...

ReconPulse - A lightweight vulnerability scanner written in Python. Functional subdomain enumeration (passive + brute force), multi-threaded port scanning, and verification through PocSuite 3 POC. ...

CVE-2022-22947 Exploit script. Contribute to Arrnitage/CVE-2022-22947_exp development by creating an account on GitHub.

A fast, reactive graphical interface (GUI) for managing Sliver C2 operations, powered by Wails and Svelte. - Gubarz/siren

WAF evasion testing toolkit. Grammar + encoding mutation, dialect-specific bypasses, evolutionary search, per-WAF gene-bank persistence. Rust. - santhreal/wafrift

C2 Control Center — deploy, manage, and destroy C2 frameworks (Mythic, Sliver) from one CLI - CR1MS0N-Operator/c4

AI-assisted self-healing CI/CD platform POC with FastAPI services, Docker, Kubernetes, GitHub Actions, LangGraph RCA agents, verification, and human-reviewed remediation PRs. - narayanareddy11/ai-s...

A zero-config Python AST linter that flags unsafe loading of an ML model/artifact (torch.load without weights_only, pickle/joblib/dill.load, np.load allow_pickle, keras load_model, yaml.load) - arb...

根据漏洞公告自动生成Poc. Contribute to 1diot9/AutoPoc development by creating an account on GitHub.