Practical cheatsheets for pivoting, tunneling, and lateral movement in Windows environments, covering SSH, Chisel, Ligolo, NTLM relay, and common execution methods. - PentestPlaybook/pentest-cheats...

ai-redteam-artifacts is a structured, doctrine‑aligned repository for AI red‑team operations. It contains adversarial prompt suites, multi‑turn test sessions, failure‑mode reports, machine‑readable...

RAG-Scheduler 是一套开箱即用、生产级轻量化 RAG 知识库问答系统，基于 FastAPI 构建，完整实现「文档上传→解析清洗→表格 / 图片处理→智能分块→向量入库→混合检索→LLM 溯源问答」全链路，适配 PDF、DOCX、PPTX、Excel、TXT、MD 等常见办公文档格式，可直接私有化部署做企业内部知识库、文档智能问答助手。 - yurow/kret-rag

NeoWAF is a lightweight Go-based WAF with DDoS protection, SQLi/XSS filtering, real-time dashboard, multi-user RBAC, and system tray support. - ErmalHasani/NeoWAF

Contribute to Bhoolu/Phishing-to-PowerShell-to-C2-Attack-Investigation development by creating an account on GitHub.

Project Date : Feb 2026 / Discovered a buffer overflow vulnerability in the IOCTL handler of the pwdrvio.sys kernel driver. The vulnerability allows an unprivileged local attacker to corrupt kernel...

一个定制的渗透专属AI代理CLI工具. Contribute to Wyl-cmd/kxns-cli development by creating an account on GitHub.

Capture HTTP requests with ease! Create a private bucket, capture requests, and analyze the results. Useful for security and E2E testing. - seanmarpo/request-catcher

Hands-on report for web application security. Learn how SQL Injection bypasses login, CSRF hijacks user sessions, and Broken Authentication leads to account takeover. Includes exploit examples and ...

Contribute to newtonpaul-hunting/c2-iocs development by creating an account on GitHub.

POC devsecop pipiline. Contribute to jasilva0606/poc-devsecop development by creating an account on GitHub.

Enhance Grok with a userscript that improves video length control, bypasses limits, and boosts overall user experience with easy installation. - stealabra5019/Grok-Enhancer

Contribute to zycoder0day/CVE-2026-3844 development by creating an account on GitHub.

The official repository for c2crobotics.org website - c2crobotics/c2crobotics.github.io

API Auth & Validation Tester is a Burp Suite extension built in Java with the Montoya API. It helps security testers quickly triage API authentication enforcement, input validation behavior...

CVE-2026-31431 - Linux Kernel Page Cache Vulnerability - Lutfifakee-Project/CVE-2026-31431

基于 Playwright 构建的现代化网页截图工具，具有高稳定性、高并发、反检测能力和自动重试机制，可以在渗透测试中提供一定的帮助。 - GoodMorning-000/Web-screenshot-tool

针对于红队攻击思维做出的red team模式，可在单对话使用（可自行适配其他AI）. Contribute to chAng-L19/codex-redteam-optin-mode development by creating an account on GitHub.

分为两大模块，api 是高校脱敏接口文档集合，lab 是基于这些接口复刻的校园系统安全靶场，内置未授权访问、水平 / 垂直越权、参数篡改等典型漏洞，支持 Docker 一键部署，是接口渗透测试与安全实训的实战平台。 - yexinyii/campus-api-docs

新一代Webshell管理器，兼容蚁剑与冰蝎的PHP webshell. Contribute to Marven11/EtherGhost development by creating an account on GitHub.