WeSCE-Benchmark #pentest
WeSCE: Multi-Scale Energy Benchmark for Security Drift in Weakly-Specified LLM Code Editing

https://github.com/WoooooZzy/WeSCE-Benchmark

cis-backend #pentest
this project is a backend service designed to support a CIS (Center for Internet Security) advisory or compliance system. It provides APIs and logic for evaluating, managing, and reporting security...

https://github.com/devpulse-star/cis-backend

Auctify #web
Professional auction house plugin for Minecraft Paper/Spigot servers with real-time bidding, H2/MySQL/SQLite storage, multi-language support, and bank-grade security.

https://github.com/PteroxOS/Auctify

netwatch #osint
NETWATCH is a terminal-based security monitoring tool that gives you continuous, live visibility into every active network connection on your machine, with automatic risk scoring, GeoIP intelligenc...

https://github.com/kyegomez/netwatch

not-a-security-issue #exploit
A deterministic Use-After-Free (UAF) in com.apple.iokit.IOSurface affecting macOS 15.x through 26.x. Reported to Apple, but they were 'unable to identify a security issue.' So, here is the PoC for ...

https://github.com/MEKOD/not-a-security-issue

kernelbreach-app #pentest
a hacker themed, pokemon inspired, dungeon crawling ASCII RPG

https://github.com/knightsky-cpu/kernelbreach-app

leona-open #exploit
Leona open-source shell: Android runtime security alpha + server-side BoxId pipeline

https://github.com/zedbully/leona-open

SecScan #exploit #scanner
Local-LLM-powered security scanner. Multi-lens per-file review + architecture extraction + threat-model synthesis + sandboxed exploit PoCs. 100% local inference via LM Studio.

https://github.com/jhammant/SecScan

UAC-Bypass-ComputerDefaults #exploit
POC of a UAC bypass using ComputerDefaults.exe. Exploits registry hijacking via the ms-settings shell command to achieve High Integrity execution without a prompt. For security research only.

https://github.com/mshute-dev/UAC-Bypass-ComputerDefaults

Exploit_CVE-2025-47812 #exploit
UnauthenticatedRCE.CVE-2025-47812

https://github.com/H3XploR/ExploitCVE-2025-47812

zero-click-exploit-analysis #exploit
CVE-2025-55177 + CVE-2025-43300: reverse-engineering the WhatsApp-ImageIO zero-click iOS chain, with interactive labs.

https://github.com/danielw98/zero-click-exploit-analysis

CVE-2025-5880-PoC #exploit #scanner
Proof-of-concept exploit for an unauthenticated path traversal vulnerability in Whistle v2.9.98.

https://github.com/yacine-rm/CVE-2025-5880-PoC

CVE-2025-68999-POC #exploit
PoC exploit for CVE-2025-68999 - Second-Order SQL Injection in Happy Addons for Elementor <= 3.20.4

https://github.com/FOLKS-iwd/CVE-2025-68999-POC

Mxmzapro #web
🔥 MxmzaPro - Proxy Swarm Tool | Multi-protocol proxy rotator + scraper + validator + chainer. HTTP/HTTPS/SOCKS4/SOCKS5. Ultra-fast async proxy manager for pentesting & anonymity. Windows/Linux ready.

https://github.com/Falconmx1/Mxmzapro

offscan #scanner
Wi-Fi pentest tool for offensive security assessments and active attacks

https://github.com/olivercalazans/offscan

bounty-toolkit #bugbounty
Automated installation of bug bounty tools for Kali Linux

https://github.com/id0nthack/bounty-toolkit

WebWeavr #osint #recon #web
A zero-footprint passive recon tool that maps a target's external surface entirely through third-party OSINT, leaving no trace in logs and no traffic on the wire

https://github.com/Chrisherr1/WebWeavr

jmo-security-repo #scanner
JMo Security Suite - Terminal-first security audit toolkit with many tools, multi-target scanning, & compliance

https://github.com/jimmy058910/jmo-security-repo

zap-ai-vulnerability-scanner #scanner #web
AI-powered automated security testing framework using OWASP ZAP and Selenium to detect and analyze web vulnerabilities based on OWASP Top 10.

https://github.com/ShrinivasBhore/zap-ai-vulnerability-scanner

scanner #scanner
Provide real-time blockchain data and analytics for DecentralChain with transaction tracking, address insights, and network monitoring tools.

https://github.com/margarethot690/scanner