@jeswr/guarded-fetch — SSRF-safe fetch for Solid clients: ipaddr.js IP classification + undici DNS-pinning connection guard + suite policy + browser URL policy. - jeswr/guarded-fetch

Framework for rapid development of offensive security tools - htrgouvea/spellbook

Native Go engine for automated aggregation, sanitization, and JSON-exporting of global CVE exploit Proof-of-Concepts. Continuously mirrored from the wild - yadavnikhil17102004/CVE-Intel

Contribute to 3rdn4Li/0day_scripts development by creating an account on GitHub.

bug-bounty, recon, subfinder, nuclei, ffuf, penetration-testing, automation, attack-surface, oscp, offensive-security Recon workflow documentation, tool chaining patterns, and attack surface enume...

Exploitability PoC for CVE-2026-43515 (Apache Tomcat constraint bypass). - covepseng/cve-2026-43515-poc

A Windows digital forensics and malware assessment tool — collects system artifacts (processes, persistence, registry, network), analyzes for IOCs/YARA matches, and generates HTML/JSON/PDF case rep...

Contribute to AlexMihailEngineer/CVE-2026-11784-Optimole-CSRF development by creating an account on GitHub.

CVE-2026-39259. Contribute to yousif-IQ/CVE-2026-39259 development by creating an account on GitHub.

Анализатор Nuitka-сборок (а также PyInstaller и другие упаковщики) для извлечения метаданных, строк, модулей и структуры из скомпилированных .exe файлов. Не декомпилятор - не восстанавливает исходн...

PowerShell toolkit for Windows research and privilege escalation testing. Contains UAC bypass techniques, persistence mechanisms, and automated testing scripts. - PEDRO00100/Win-PrivEsc

Offensive web and API attack framework — fingerprinting, SSRF to cloud metadata, IDOR enumeration, JWT/OAuth attacks, SQL/NoSQL/SSTI injection, and GraphQL exploitation. - arkanzasfeziii/Sentinel

Production-shaped async medical document ingestion service — FastAPI + Celery + PostgreSQL + Redis, hexagonal architecture, at-least-once delivery with exponential backoff, API-key auth, structured...

Contribute to Saku0512/CVE-2026-54761-poc development by creating an account on GitHub.

A Burp Suite extension for customizing the text selection background color used in Burp message editors. - evenmonk/SelectHue

Burp Suite extension (Jython) for SQL injection testing and CSRF verification with automatic, file-based evidence collection. - charnyladaro/EvidenceCreator

Shellcode Generator. Contribute to n0bele/ShellcodeGenerator development by creating an account on GitHub.

A Java-based automated web vulnerability scanner and security analyzer that evaluates target URLs for configuration flaws, missing headers, and common vulnerabilities. - etlevakoci/web-shield-analyzer

Container Image Vulnerability Scanner with Reporting - DevOps-Capstones/SecureGate-AI

Command and control framework. Contribute to CrystalC2/crystal-c2 development by creating an account on GitHub.