Educational lightweight C2 framework (Flask + SQLite + Python implant) for authorized local security labs only. - dev-joshua-py/custom-c2-server

My custom Docker Compose setup for running LibreChat with an air-gapped/isolated Code Interpreter (RCE). - chottokun/my-librechat-rce-setup

YARA-X engine, ruleset and dashboard in a single self-contained WASI p3 WebAssembly component for Cosmonic Desktop / wasmCloud - cosmonic-labs/yara-x-wasm

Bypass Uploader is a collection of advanced webshell files designed for red team operations and authorized penetration testing. These shells implement cutting-edge WAF bypass techniques from 2026 r...

Este repositorio contiene una demostración educativa de la mitigación para **CVE-2026-68820**, una vulnerabilidad crítica de tipo **Use-After-Free (UAF)** en el driver `afd.sys` de Windows. - fevar...

pooler backend- this backend service is provide to authentication for mobile application. Spring Boot REST backend for Hoppo’s identity, discovery, fair Common Point, invitation, short-lived chat, ...

A hands-on web security project exploring vulnerability chaining, attack paths, and exploitation of common web application weaknesses. - alia-77/Chained-Web-Vulnerabilities

CVE-2026-19874. Contribute to alicealys/mgo3-rce development by creating an account on GitHub.

Generic Shellcode Loader which makes use of AES encryption. - 0xStalic/AES-Shellcode-Loader

一款能自动搜寻漏洞和资产的web扫描器. Contribute to ZYith/AutoWebSec development by creating an account on GitHub.

A simple Python-based web vulnerability scanner. Contribute to Pratibha517/WebVulnerabilityScanner development by creating an account on GitHub.

Burp Suite extension for testing WebAuthn/FIDO2 passkey ceremonies: decode, edit, and attack CBOR/COSE payloads. - anvilsecure/passkey-editor

Multi-cloud metadata service enumerator via SSRF (AWS/Azure/GCP) with IMDSv2 support and MITRE ATT&CK mapping - skzun/CloudCrawler

Sovereign CORS reverse proxy for browser git smart-HTTP — lets a wasm git client reach non-CORS remotes (GitHub, Forgejo). Pure-Go, CGO=0, SSRF-guarded, auth-passthrough. - go-browserhttp/gitcorsproxy

Demostración práctica y bitácora técnica de explotación de BlueKeep (CVE-2019-0708) en RDP usando Nmap y Metasploit, documentando la resolución de errores en el entorno virtual. - SebasPV27/Explota...

Modern web UI for Sliver C2 framework with real binary integration - glassmorphism design, server/client management, command execution - mscupcakegkill-hue/sliver-c2-ui

PoC for CVE-2026-43914: Vaultwarden <1.35.4 email-2FA brute-force bypass password oracle. Stdlib-only Python. - Boreas37/CVE-2026-43914-PoC

Active Directory pentest methodology for Claude Code: skills, agents and slash commands for internal AD red-team work (Kerberoasting, ADCS ESC1-17, DCSync, ACL abuse, NTLM relay, delegation), OPSEC...

TP-Link Archer BE800 V1 — Parental Control LAN RCE - Slagzz/CVE-2026-9254

⭐️ Nessus Professional | Vulnerability Scanner Pro v10.2 | Setup Installer | Keygen License | Full Version Activation | Latest Build Updated | Security Assessment Tool | Risk Management Software | ...