Collection of tools to analyze sliver C2 traffic. Contribute to charbel62/SliverC2-forensics development by creating an account on GitHub.

🛠️ Build a minimal Linux kernel development and exploitation lab with panix, designed for kernel testing and debugging in a Docker environment. - Technos0855/panix

Contribute to JoaquinHernandez/yara-performance-tester development by creating an account on GitHub.

Spiral Guardian — Sovereign, open-source, MCP-native security agent for multi-device research infrastructure. Hub-and-spoke topology with Wazuh SIEM, YARA-X, osquery, Santa, Suricata, Falco. 8 MCP ...

EdgeStealth-C2 is a Command and Control (C2) framework developed as a proof of concept for the academic research paper "Stealth at The Edge". - MoMhaidat05/EdgeStealth-C2

Python CLI web vulnerability scanner — crawls target URLs and tests for SQLi, XSS, Open Redirect, missing security headers, and sensitive file exposure. Authenticated scanning supported via cookie ...

Herramienta ofensiva avanzada para la explotación automatizada de vulnerabilidades IDOR y CSRF, diseñada para Bug Bounty, Red Team y pentesters. Permite detectar referencias inseguras a objetos, ge...

用于自动化归档漏洞情报，输出分析报告以及poc. Contribute to InKu0721/- development by creating an account on GitHub.

Template-based, modular, multi-language, shellcode obfuscator and compiler - nanmonee/staticbypass

toanln-cov has one repository available. Follow their code on GitHub.

Contribute to hereticL1nk/EITS-Portal-Exploit-CVE-2026-31367-PoC development by creating an account on GitHub.

Minimal DAST harness: run nuclei/nikto behind one interface with local-only safety, per-scanner completion evidence, and a merged report - moovingGun/dast-harness

Contribute to Black1hp/makeswift-rce-poc development by creating an account on GitHub.

Responsive FileManager <= 9.14.0 — Authenticated RCE via `save_img` Path Traversal + Arbitrary File Write - Yucaerin/Responsive-FileManager-9.14.0

Vulnerable-by-design e-commerce training shop (XSS / SQLi / CSRF) built with PHP + SQLite - for educational purposes only. - Abdelrhman-Sherif-Mohamed/HakShop

Educational, container-only demonstration of cross-site scripting (XSS / CWE-79): a deliberately vulnerable app and its secure twin, side by side. Runs locally over loopback via Docker Compose agai...

About This is a repo of my solution of one XSS challenge website (http://sudo.co.il/xss/) . This challenges may have different types of solutions. My solutions are not the only one. So, keep search...

UploadSentinel 是一个面向授权安全测试、Web 安全评估和文件上传接口复核的桌面工具. Contribute to HooXuefeng/File-Upload-Security-Testing-Workbench development by creating an account on GitHub.

kali-pentest基于《Kali Linux渗透测试的艺术》方法论蒸馏，提供一个可被agent调用的、面向远程Kali Linux渗透测试的完整执行框架。 - githuBlijingai/kali-pentest

Agentic life cycle for this Spring project POC. Contribute to shrutikulkarni5020/SpringAIJIRAColab development by creating an account on GitHub.

Zhipu BigModel web fetch provider for DeepSeek Harness (dsh) — delegated web_reader MCP behind a ctx.web WebFetchProvider; SSRF surface nil, session handshake, per-fetch auditing - FWW321/dsh-web-f...