Local Python tool that monitors UAlberta Bear Tracks pages for “Open Seats X of Y” and sends Telegram alerts when seats appear or re-login is needed. No auto-enroll, no password storage, no MFA/CAP...

SolarWinds Serv-U CVE-2026-28318: unauthenticated Content-Encoding: deflate crash. Root-cause analysis (invalid free of an interior pointer -> heap corruption) + DoS-only PoC. Fixed in 15.5....

Mirabilis is a one-command dev container that runs Claude Code as an autonomous AI coding agent in an isolated Docker sandbox. You get full bypass autonomy behind a container boundary, the neuro-ma...

Phishing Detection & Vulnerability Scanner — Python Flask - nirajsharma-bit/PhishGuard

Mini vulnerability scanner using Python. Contribute to gundalavarsha197-sys/vulnerability-scanner development by creating an account on GitHub.

C2 framework deployment and phishing infrastructure using Sliver C2, GoPhish, msfvenom, and Swaks. Topics include HTTP beacon communication, VBA macro weaponization, LNK shortcut execution, HTML sm...

C2 Framework . Contribute to vaibhav2vicky/Minotaur development by creating an account on GitHub.

Web安全、渗透测试、漏洞复现与CTF学习笔记. Contribute to angle102/Web-Security-Learning-Notes development by creating an account on GitHub.

全功能 Web 漏洞扫描工具. Contribute to huocai250/Webscanner development by creating an account on GitHub.

A Basic and Unassuming RML Processor. Contribute to kg-construct/BURP development by creating an account on GitHub.

CVE-2026-10520 - Ivanti Sentry Pre-Auth OS Command Injection Mass Scanner - ogenich/CVE-2026-10520

基于 Spring Boot 3.5 + Spring Cloud 2025 + Spring Cloud Alibaba 2025 + 六边形架构 (Hexagonal Architecture) + DDD 领域驱动设计 - 504479518/NeoApes-Platform

Exchange Online email spoofing PoC — Ghost Sender vulnerability. Delivers spoofed emails bypassing SPF, DKIM, and DMARC when external MX records are configured without a partner connector. Includes...

基于 SafeLine WAF 与 HFish 蜜罐的轻量级安全事件采集、关联分析、ATT&CK 映射与 Web Dashboard 平台 - wzw57/waf-honeypot-collector

an automated web vulnerability scanner built on the MERN stack (Node.js + React), designed to identify and verify common OWASP Top 10 vulnerabilities in both traditional and single‑page application...

一个基于 JavaFX 开发的本地默认账号密码检索工具。该工具启动时会自动加载本地的字典文件，用户可以通过顶部的搜索框输入产品、设备或中间件的关键词，即可快速过滤并匹配出对应的信息。帮助测试人员快速查找设备、Web应用或中间件的默认弱口令。 - CllmsyK/Login_GG

Contribute to DevBE2004/burp-captcha-extension development by creating an account on GitHub.

An end-to-end security assessment detailing remote code execution (RCE) and privilege escalation on the Envizon machine. - ashikrafik/System-Penetration-Root-Escalation

Nuclei scripts created by @rxerium for zero days / actively exploited vulnerabilities. - rxerium/rxerium-templates

Measured web app penetration test of the AltoroMutual demo bank (demo.testfire.net) — SQLi auth bypass + reflected XSS, with reports, per-finding write-ups, Sigma detections, and a documented respo...

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management - OWASP/Nettacker