在 Chrome DevTools 中直接对授权目标做请求变异与响应差异分析的轻量级工具，无需代理或Burp。Authorized-testing request fuzzing & response diffing. - Mon-bid/Diffuzz

OXIDE Vulnerability Scanner v8.7.2 — A Rust-powered security scanner with AI/ML anomaly detection, advanced reconnaissance, intelligent fuzzing, and vulnerability discovery. - HyperSecurityLabs/ox...

Contribute to imbas007/RCE-CVE-2026-10520-CVE-2026-10523 development by creating an account on GitHub.

Pyhton POC for the KeyCloak CVE-2026-18963. Contribute to T0w0T/POC-CVE-2026-18963 development by creating an account on GitHub.

Educational lightweight C2 framework (Flask + SQLite + Python implant) for authorized local security labs only. - dev-joshua-py/custom-c2-server

My custom Docker Compose setup for running LibreChat with an air-gapped/isolated Code Interpreter (RCE). - chottokun/my-librechat-rce-setup

YARA-X engine, ruleset and dashboard in a single self-contained WASI p3 WebAssembly component for Cosmonic Desktop / wasmCloud - cosmonic-labs/yara-x-wasm

Bypass Uploader is a collection of advanced webshell files designed for red team operations and authorized penetration testing. These shells implement cutting-edge WAF bypass techniques from 2026 r...

Este repositorio contiene una demostración educativa de la mitigación para **CVE-2026-68820**, una vulnerabilidad crítica de tipo **Use-After-Free (UAF)** en el driver `afd.sys` de Windows. - fevar...

pooler backend- this backend service is provide to authentication for mobile application. Spring Boot REST backend for Hoppo’s identity, discovery, fair Common Point, invitation, short-lived chat, ...

A hands-on web security project exploring vulnerability chaining, attack paths, and exploitation of common web application weaknesses. - alia-77/Chained-Web-Vulnerabilities

CVE-2026-19874. Contribute to alicealys/mgo3-rce development by creating an account on GitHub.

Generic Shellcode Loader which makes use of AES encryption. - 0xStalic/AES-Shellcode-Loader

一款能自动搜寻漏洞和资产的web扫描器. Contribute to ZYith/AutoWebSec development by creating an account on GitHub.

A simple Python-based web vulnerability scanner. Contribute to Pratibha517/WebVulnerabilityScanner development by creating an account on GitHub.

Burp Suite extension for testing WebAuthn/FIDO2 passkey ceremonies: decode, edit, and attack CBOR/COSE payloads. - anvilsecure/passkey-editor

Multi-cloud metadata service enumerator via SSRF (AWS/Azure/GCP) with IMDSv2 support and MITRE ATT&CK mapping - skzun/CloudCrawler

Sovereign CORS reverse proxy for browser git smart-HTTP — lets a wasm git client reach non-CORS remotes (GitHub, Forgejo). Pure-Go, CGO=0, SSRF-guarded, auth-passthrough. - go-browserhttp/gitcorsproxy

Demostración práctica y bitácora técnica de explotación de BlueKeep (CVE-2019-0708) en RDP usando Nmap y Metasploit, documentando la resolución de errores en el entorno virtual. - SebasPV27/Explota...

Modern web UI for Sliver C2 framework with real binary integration - glassmorphism design, server/client management, command execution - mscupcakegkill-hue/sliver-c2-ui

PoC for CVE-2026-43914: Vaultwarden <1.35.4 email-2FA brute-force bypass password oracle. Stdlib-only Python. - Boreas37/CVE-2026-43914-PoC