Contribute to Bhoolu/Phishing-to-PowerShell-to-C2-Attack-Investigation development by creating an account on GitHub.

Project Date : Feb 2026 / Discovered a buffer overflow vulnerability in the IOCTL handler of the pwdrvio.sys kernel driver. The vulnerability allows an unprivileged local attacker to corrupt kernel...

一个定制的渗透专属AI代理CLI工具. Contribute to Wyl-cmd/kxns-cli development by creating an account on GitHub.

Capture HTTP requests with ease! Create a private bucket, capture requests, and analyze the results. Useful for security and E2E testing. - seanmarpo/request-catcher

Hands-on report for web application security. Learn how SQL Injection bypasses login, CSRF hijacks user sessions, and Broken Authentication leads to account takeover. Includes exploit examples and ...

Contribute to newtonpaul-hunting/c2-iocs development by creating an account on GitHub.

POC devsecop pipiline. Contribute to jasilva0606/poc-devsecop development by creating an account on GitHub.

Enhance Grok with a userscript that improves video length control, bypasses limits, and boosts overall user experience with easy installation. - stealabra5019/Grok-Enhancer

Contribute to zycoder0day/CVE-2026-3844 development by creating an account on GitHub.

The official repository for c2crobotics.org website - c2crobotics/c2crobotics.github.io

API Auth & Validation Tester is a Burp Suite extension built in Java with the Montoya API. It helps security testers quickly triage API authentication enforcement, input validation behavior...

CVE-2026-31431 - Linux Kernel Page Cache Vulnerability - Lutfifakee-Project/CVE-2026-31431

基于 Playwright 构建的现代化网页截图工具，具有高稳定性、高并发、反检测能力和自动重试机制，可以在渗透测试中提供一定的帮助。 - GoodMorning-000/Web-screenshot-tool

针对于红队攻击思维做出的red team模式，可在单对话使用（可自行适配其他AI）. Contribute to chAng-L19/codex-redteam-optin-mode development by creating an account on GitHub.

分为两大模块，api 是高校脱敏接口文档集合，lab 是基于这些接口复刻的校园系统安全靶场，内置未授权访问、水平 / 垂直越权、参数篡改等典型漏洞，支持 Docker 一键部署，是接口渗透测试与安全实训的实战平台。 - yexinyii/campus-api-docs

新一代Webshell管理器，兼容蚁剑与冰蝎的PHP webshell. Contribute to Marven11/EtherGhost development by creating an account on GitHub.

CSRF is an attack where a victim’s browser is tricked into making an authenticated request to a trusted application without their consent. - siran9091/CSRF

A stdio bridge that lets Codex use Burp Suite MCP tools - AA8j/codex-burp-mcp-bridge