An enterprise file upload security engine written in Python. Protects applications against Remote Code Execution (RCE), Unrestricted File Upload vulnerabilities, Polyglot web shells, and MIME-type ...

Secure-defaults drop-in shim for LangChain: SSRF-checked loaders, deserialization allowlisting, jinja2 SSTI gate, human-approval-gated tools. MIT. From Hedgerow. - hedgerow-dev/langchain-hardened

HIPR (Hardened Isolated Proxy Runtime) — A fault-tolerant, async egress proxy and outbound guardrail engine built with FastAPI and HTTPX. Features phase-decoupled timeouts, exponential backoff with...

Contribute to MinhHK68/CVE-2026-13736 development by creating an account on GitHub.

Shellcode Loader. Contribute to lukehebe/SleepyLoader development by creating an account on GitHub.

Modular web vulnerability scanner and security assessment framework. 🚧 Under Development - Mayank045/Web-VulnScan

An advanced, context-aware input sanitizer and XSS detection engine written in Python. Performs structural tokenization, recursive obfuscation decoding (URL, Base64, HTML entities), and context-sen...

Web application security testing project covering SQL Injection, Stored XSS, Reflected XSS and CSRF using DVWA. - rutujalkhade2026/Cybersecurity-internship-task-3

A modular C2 framework for studying agent communication, remote tasking, and endpoint security in controlled environments. - Oreki0504/Argus-C2

多诱饵紧凑型无状态SSH蜜罐，包含假Claude、Codex、Cursor、云平台与运维凭据，支持任意账户密码、公钥及交互认证，模拟Linux文件系统、网络、防火墙和常用命令，实时记录来源、凭据、命令与行为，并提供Web审计控制台 - ra1nyxin/sshfakekeyhome

Elite exploitation toolkit for CVE-2025-55182 (React Server Components RCE). Async polymorphic payloads, advanced WAF/CDN bypass, proxy rotation, Shodan/Censys mass scan, auto-pwn + reverse shells,...

Hands-on Sliver C2 home lab & operator playbook — reproducible setup, architecture, and a full adversary-emulation walkthrough on an isolated localhost lab (Red Team / C2). - barisburakturg...

Homebrew tap for onyx — local-first WordPress vulnerability scanner - Boreas37/homebrew-onyx

A simple Python-based vulnerability scanner that identifies open ports and provides basic security warnings. - krrish1211/Vulnerability__Scanner

My own little Vulnerability Scanner. Contribute to Billynary/Vulnerability-Scanner development by creating an account on GitHub.

Template-driven web vulnerability scanner. Zero dependency Node.js. YAML "sigils", async engine, JSON/SARIF output. For authorized testing only. - larprober/Judger

Sploit -- All-in-one, AI-powered cybersecurity toolkit for web, network, and phishing tests. Modular, cross-platform, Docker-ready, with GUI & CLI. Open source by AUX-441 Team. - Largo-m/...

PoC for CVE-2026-75616, an authenticated OS command injection in TP-Link Archer C20 v6 firmware - totekuh/CVE-2026-75616

Unauthenticated SQL injection to complete RCE. Contribute to YonLiud/CVE-2026-76904 development by creating an account on GitHub.

Contribute to PandukaWijesinghee/SSD_Lab_06_Protecting-against-XSS development by creating an account on GitHub.

oxidev8.6.9 a Rust-powered security scanner that uses AI/ML anomaly detection, multi‑vector fuzzing, TLS/CORS misconfiguration auditing, Recon, and Zero‑day discovery into a single portable executa...