Jailbreak supported Google Pixel phones with CVE-2026-43499 - alex193a/Root-My-Pixel

A Rust-based tool for staged remote process injection via IPC orchestration in Windows. It bypasses EDR flagging and avoids noisy shellcode by separating the dormant stager (pipe server) from the e...

Free open-source IP rotation proxy (SOCKS5/HTTP) + Burp extension for people without money - BlasterX24/ip-rotator-free

这是一个面向多项目维护者的自动化工具，旨在自动处理 Dependabot 和 Code Scanning 产生的大量简单、重复的告警修复工作，如依赖版本升级、安全漏洞修复等，从而显著提升维护效率。 - dependfix/dependfix

Generate YARA rules from Windows API hashes for malware detection and hunting. - tbarabosch/apihash_to_yara

CVE-2025-5781 FreePBX Exploit POC. Contribute to jasonbernier/CVE-2025-5781 development by creating an account on GitHub.

Local-first, modular static malware scanner: YARA, PE/JAR/APK/Office/PDF analysis, safe archive extraction, explainable verdicts, optional hash reputation lookups. - trashdino0/malware-scanner

POC FastAPI librariy application in a Jenkins pipeline to illustrate secured CI/CD, rollback and run-time persistence. - kekcoke/pykins

Tenant isolation, replay protection, signature verification, path traversal, SSRF, redaction, and CI supply-chain boundary tests. - messaging-intel-test/security-boundary-tests

Contribute to 0xSt4rk007/ssrf development by creating an account on GitHub.

A Burp Suite extension for viewing JWTs that actually gives you the space to view them. - zw00sh/burp-jwt-viewer

CVE-2025-55182 — Next.js Flight Deserialization RCE exploit with interactive shell, single-command execution and multi-payload reverse shell chain. For authorized penetration testing only. - dotnet...

Responsible PoC for a missing-authorization-check comment-triggered RCE finding in bazel-contrib/rules_cuda integration-tests.yaml (reported to Google Bug Hunters OSS VRP) - 2423gen-stack/rules-cud...

PortSwigger is the UK-based security research company behind Burp Suite, the industry-standard web and API security testing platform used by penetration testers and enterprise AppSec teams worldwid...

ReconPulse - A lightweight vulnerability scanner written in Python. Functional subdomain enumeration (passive + brute force), multi-threaded port scanning, and verification through PocSuite 3 POC. ...

CVE-2022-22947 Exploit script. Contribute to Arrnitage/CVE-2022-22947_exp development by creating an account on GitHub.

A fast, reactive graphical interface (GUI / UI) for managing Sliver C2 operations, powered by Wails and Svelte. - Gubarz/siren

WAF evasion testing toolkit. Grammar + encoding mutation, dialect-specific bypasses, evolutionary search, per-WAF gene-bank persistence. Rust. - santhreal/wafrift

C2 Control Center — deploy, manage, and destroy C2 frameworks (Mythic, Sliver) from one CLI - CR1MS0N-Operator/c4

AI-assisted self-healing CI/CD platform POC with FastAPI services, Docker, Kubernetes, GitHub Actions, LangGraph RCA agents, verification, and human-reviewed remediation PRs. - narayanareddy11/ai-s...