WAF evasion testing toolkit. Grammar + encoding mutation, dialect-specific bypasses, evolutionary search, per-WAF gene-bank persistence. Rust. - santhreal/wafrift

C2 Control Center — deploy, manage, and destroy C2 frameworks (Mythic, Sliver) from one CLI - CR1MS0N-Operator/c4

AI-assisted self-healing CI/CD platform POC with FastAPI services, Docker, Kubernetes, GitHub Actions, LangGraph RCA agents, verification, and human-reviewed remediation PRs. - narayanareddy11/ai-s...

A zero-config Python AST linter that flags unsafe loading of an ML model/artifact (torch.load without weights_only, pickle/joblib/dill.load, np.load allow_pickle, keras load_model, yaml.load) - arb...

根据漏洞公告自动生成Poc. Contribute to 1diot9/AutoPoc development by creating an account on GitHub.

Network vulnerability scanner and traffic monitor with web dashboard. - prince-dholakiya/network-security-suite

PoC Exploit for blind SSRF in XML-RPC Wordpress. Contribute to 4chech/CVE-2022-3590 development by creating an account on GitHub.

0ldSQL_MySQL_RCE_exploit.py (ver. 1.0) (CVE-2016-6662) MySQL Remote Root Code Execution / Privesc PoC Exploit For testing purposes only. Do no harm. - Ashrafdev/MySQL-Remote-Root-Code-Execution

Python-based antivirus and endpoint security prototype using SHA-256 signatures, YARA rules, real-time monitoring, quarantine, logging and security reporting. - vijaykumarsistu789-stack/basic-pytho...

SSRF靶场，覆盖9大分类（基础SSRF、协议级SSRF、IP地址过滤绕过、URL解析器混淆、302重定向SSRF、DNS Rebinding、Blind SSRF、云元数据攻击、真是业务场景），真实业务场景覆盖12个真实的业务场景（webhook测试器、URL预览、图片代理/CDN、PDF生成器、API网关/代理、RSS阅读器、从URL导入文件、短链接展开器、健康检查监控、OAuth SS...

Java反序列化靶场，涵盖CB、CC、Dubbo、Fastjson、Hessian、Jndi、Log4j、Shiro、Weblogic等Java反序列化场景 - TaoLjx/JavaDeserialization

An advanced web vulnerability scanner with WAF bypass, AI assistance, and hacker-style terminal. - eghbalizade411-ux/cyber-ghost-scanner

vulnerability scanner. Contribute to 2403396160267-crypto/vulnerability-scanner development by creating an account on GitHub.

Dossiers of developer-targeted malware campaigns delivered via fake-recruiter pitches. Each case has a master analysis plus copy-paste-ready artifacts for would-be victims, abuse desks, detection e...

Contribute to DevXDividends/CodeForge-RCE development by creating an account on GitHub.

AI Agent 安全测试工具 — 一键扫描 75+ 攻击向量，含 Prompt Injection / Tool Abuse / Data Exfiltration / SSRF / 中文场景 - simisdav55-oss/agent-audit

Self-hostable Threat Intelligence Platform: collects, enriches, scores and correlates IOCs, with STIX 2.1/MISP sharing and live alerting. Offline-first and SSRF-guarded. FastAPI, async SQLAlchemy, ...

LeekShell 是一款完全自研的轻量级C2框架，采用 Python + C++ 架构，舍弃部分冗余功能以换取更高的隐蔽性与可控性。 - littleleeks/LeekShell

의도적으로 취약하게 설계한 금융 웹앱(NeoBank)에 16종 취약점을 이식하고 Docker 인프라·PoC·대응 코드까지 직접 구현한 모의해킹 프로젝트 - kevin9480/Penetration_Testing

CVE-2026-68138 Linux qdisc rate-table race local privilege escalation PoC - aramosf/CVE-2026-68138

AI-powered Agentic Vulnerability Scanner that analyzes source code repositories, detects security vulnerabilities, and recommends intelligent fixes. Features multi-agent workflows, automated remedi...