Concorde is an advanced, GUI-based Red Team command and control (C2) framework designed for penetration testers and security professionals. It provides a comprehensive suite of tools for reverse sh...

APT and DNF repositories for Yara Code. Contribute to vsdudakov/packages development by creating an account on GitHub.

Autonomous AI-powered penetration testing agent built with LangGraph and Groq (Llama 3). Automates recon, nmap scanning, CVE lookup via ChromaDB, and exploit planning through a multi-phase reasonin...

Python security tools built from scratch while learning ethical hacking — port scanner, web vulnerability scanner, and password analyser. - Sharan-Ravindran/python-security-tools

A web-based vulnerability scanner for authorized security assessments using OWASP ZAP. - Ibrahimx07/Website-Vulnerability-Scanner

网络安全实验室：漏洞扫描与防御策略. Contribute to Xufazhong/network-security-lab development by creating an account on GitHub.

Run coding agents in Apple Virtualization VMs whose network egress they cannot bypass. Enforcement lives outside the guest, so it holds even against root with every capability. - satishbabariya/san...

Root My Galaxy SM-S9180 (dm3q) S9180ZHS8FZG1 payload port - CVE-2026-43499 + KernelSU LKM - hackyangwen-lgtm/rmg-s9180-fzg1

Oracle WebLogic Console unauthenticated auth bypass + RCE exploit (CVE-2020-14882 / CVE-2020-14750) - hyderpwn/CVE-2020-14882-weblogic

Infrastructure-as-code deployment and configuration for a Tenable Nessus vulnerability scanner on the nwarila platform. - nwarila-platform/nessus

Detection engine — Sigma and native rule matching plus YARA over a normalized forensic timeline; detections emitted as events. Part of the Citadel suite. - sltcnb/sigil

Oracle WebLogic Console unauthenticated auth bypass + RCE exploit (CVE-2020-14882 / CVE-2020-14750) - hyderpwn/weblogic

元情 yotta-intel — 威胁情报 IOC 提取与规范化引擎：IP/域名/URL/邮箱/哈希/CVE，defang/refang、去重归一、输出 CSV/JSON/STIX-lite（零依赖 Python 3.8+） - YottaMeta/yotta-intel

Contribute to dRafaleD/Malware-analysis-AsphDex development by creating an account on GitHub.

Burp upstream proxy that re-originates requests with a real Chrome uTLS (JA3/JA4) + HTTP/2 fingerprint to bypass Cloudflare TLS-fingerprint blocking - hyderpwn/burp-cloudflare-fp-proxy

Automated API security testing framework in Java. Detects SQLi, XSS, SSRF, JWT flaws, CSRF, IDOR, deserialization, and more. Integrates with Burp Suite & OWASP ZAP. Supports CLI usage, Dock...

GitOps POC: KrakenD API gateway on Kubernetes, delivered by Argo CD - taroninak/krakend-gitops

Minimal reproduction for Spring AI ParagraphManager sibling self-loop OOM (incomplete fix of CVE-2026-47851) - tangyaofq/spring-ai-sibling-loop-poc

A scanner for CVE-2026-55040 and CVE-2026-63520, designed to determine whether the server is affected by these two CVEs. - virologi-info/mssharepoint-scanner

Docker-bounded validation lab for the QEMU CXL mailbox disclosure and handler-overwrite chain - dinosn/qemu-cxl-mailbox-rce-lab

A Python-based malware scanner using custom YARA rules to detect suspicious files, generate reports, calculate MD5 hashes, quarantine threats, and monitor files in real time. - Irfan2311/Malware-Sc...