Contribute to blackbox-ops/figma-ssrf-poc development by creating an account on GitHub.

Claude Code skill: mine JavaScript bundles (live host / dir / URL list / Burp MCP proxy history) for hidden endpoints, params, secrets, feature flags, and authz logic. - z3r0s6/js-analysis-skill

onyx — local-first WordPress vulnerability scanner. Reads the Wordfence feed from disk, no API, no accounts. MIT. - Boreas37/onyx

A professional Python-based web application vulnerability scanner that detects security header issues, TLS/SSL problems, risky HTTP methods, exposed resources, cookies, and technology disclosure. -...

Penetration testing framework. Run the tools you already use; Raven captures the output, tracks findings, and generates the report. - chamberdoorsecurity/raven

Delay alerts for Finnish cargo rail: a Go service over Postgres that notifies once per train per day, with duplicate suppression enforced by the database rather than application code. - calemccammo...

PoC: changedetection.io unauthenticated OpenAPI schema disclosure (CVE-2026-71203, Medium 5.3) - Nel-droid/CVE-2026-71203-PoC

PoC: changedetection.io unlimited login brute-force, no rate limiting (CVE-2026-71205, Medium 6.5) - Nel-droid/CVE-2026-71205-PoC

PoC: Grafana Editor role deletes protected contact points (CVE-2026-72585, Medium 6.5) - Nel-droid/CVE-2026-72585-PoC

PoC: Shiori JWT CheckToken never re-validates account state (CVE-2026-71206, High 8.2) - Nel-droid/CVE-2026-71206-PoC

The objective was to identify suspicious activity, analyze related events, develop detection logic, classify incidents by severity, and recommend appropriate response actions. - chinedu-okoli07/Blu...

Collection of tools to analyze sliver C2 traffic. Contribute to charbel62/SliverC2-forensics development by creating an account on GitHub.

🛠️ Build a minimal Linux kernel development and exploitation lab with panix, designed for kernel testing and debugging in a Docker environment. - Technos0855/panix

Contribute to JoaquinHernandez/yara-performance-tester development by creating an account on GitHub.

Spiral Guardian — Sovereign, open-source, MCP-native security agent for multi-device research infrastructure. Hub-and-spoke topology with Wazuh SIEM, YARA-X, osquery, Santa, Suricata, Falco. 8 MCP ...

EdgeStealth-C2 is a Command and Control (C2) framework developed as a proof of concept for the academic research paper "Stealth at The Edge". - MoMhaidat05/EdgeStealth-C2

Python CLI web vulnerability scanner — crawls target URLs and tests for SQLi, XSS, Open Redirect, missing security headers, and sensitive file exposure. Authenticated scanning supported via cookie ...

Herramienta ofensiva avanzada para la explotación automatizada de vulnerabilidades IDOR y CSRF, diseñada para Bug Bounty, Red Team y pentesters. Permite detectar referencias inseguras a objetos, ge...

用于自动化归档漏洞情报，输出分析报告以及poc. Contribute to InKu0721/- development by creating an account on GitHub.

Template-based, modular, multi-language, shellcode obfuscator and compiler - nanmonee/staticbypass

toanln-cov has one repository available. Follow their code on GitHub.