SSTI contact form to rce. Contribute to shootcannon/CVE-2026-4257 development by creating an account on GitHub.

Local pacman repo that tracks the latest anomalyco/opencode desktop releases, bypassing the AUR which lags behind. - BrentJMaxwell/opencode-desktop-latest

A stdio bridge that lets Codex use Burp Suite MCP tools - AA8j/codex-burp-mcp-bridge

CSRF is an attack where a victim’s browser is tricked into making an authenticated request to a trusted application without their consent. - siran9091/CSRF

新一代Webshell管理器，兼容蚁剑与冰蝎的PHP webshell. Contribute to Marven11/EtherGhost development by creating an account on GitHub.

分为两大模块，api 是高校脱敏接口文档集合，lab 是基于这些接口复刻的校园系统安全靶场，内置未授权访问、水平 / 垂直越权、参数篡改等典型漏洞，支持 Docker 一键部署，是接口渗透测试与安全实训的实战平台。 - yexinyii/campus-api-docs

针对于红队攻击思维做出的red team模式(让你的codex像红队一样思考！)，可在单对话使用（目前只支持5.4，5.5需要过cyber认证，可自行适配其他AI） - chAng-L19/codex-redteam-mode

基于 Playwright 构建的现代化网页截图工具，具有高稳定性、高并发、反检测能力和自动重试机制，可以在渗透测试中提供一定的帮助。 - GoodMorning-000/Web-screenshot-tool

CVE-2026-31431 - Linux Kernel Page Cache Vulnerability - Lutfifakee-Project/CVE-2026-31431

API Auth & Validation Tester is a Burp Suite extension built in Java with the Montoya API. It helps security testers quickly triage API authentication enforcement, input validation behavior...

The official repository for c2crobotics.org website - c2crobotics/c2crobotics.github.io

Contribute to zycoder0day/CVE-2026-3844 development by creating an account on GitHub.

Enhance Grok with a userscript that improves video length control, bypasses limits, and boosts overall user experience with easy installation. - stealabra5019/Grok-Enhancer

POC devsecop pipiline. Contribute to jasilva0606/poc-devsecop development by creating an account on GitHub.

Contribute to newtonpaul-hunting/c2-iocs development by creating an account on GitHub.

Hands-on report for web application security. Learn how SQL Injection bypasses login, CSRF hijacks user sessions, and Broken Authentication leads to account takeover. Includes exploit examples and ...

Capture HTTP requests with ease! Create a private bucket, capture requests, and analyze the results. Useful for security and E2E testing. - seanmarpo/request-catcher

一个定制的渗透专属AI代理CLI工具. Contribute to Wyl-cmd/kxns-cli development by creating an account on GitHub.

Project Date : Feb 2026 / Discovered a buffer overflow vulnerability in the IOCTL handler of the pwdrvio.sys kernel driver. The vulnerability allows an unprivileged local attacker to corrupt kernel...