Python-based antivirus and endpoint security prototype using SHA-256 signatures, YARA rules, real-time monitoring, quarantine, logging and security reporting. - vijaykumarsistu789-stack/basic-pytho...

0ldSQL_MySQL_RCE_exploit.py (ver. 1.0) (CVE-2016-6662) MySQL Remote Root Code Execution / Privesc PoC Exploit For testing purposes only. Do no harm. - Ashrafdev/MySQL-Remote-Root-Code-Execution

PoC Exploit for blind SSRF in XML-RPC Wordpress. Contribute to 4chech/CVE-2022-3590 development by creating an account on GitHub.

Network vulnerability scanner and traffic monitor with web dashboard. - prince-dholakiya/network-security-suite

根据漏洞公告自动生成Poc. Contribute to 1diot9/AutoPoc development by creating an account on GitHub.

A zero-config Python AST linter that flags unsafe loading of an ML model/artifact (torch.load without weights_only, pickle/joblib/dill.load, np.load allow_pickle, keras load_model, yaml.load) - arb...

AI-assisted self-healing CI/CD platform POC with FastAPI services, Docker, Kubernetes, GitHub Actions, LangGraph RCA agents, verification, and human-reviewed remediation PRs. - narayanareddy11/ai-s...

C2 Control Center — deploy, manage, and destroy C2 frameworks (Mythic, Sliver) from one CLI - CR1MS0N-Operator/c4

WAF evasion testing toolkit. Grammar + encoding mutation, dialect-specific bypasses, evolutionary search, per-WAF gene-bank persistence. Rust. - santhreal/wafrift

A fast, reactive graphical interface (GUI) for managing Sliver C2 operations, powered by Wails and Svelte. - Gubarz/siren

CVE-2022-22947 Exploit script. Contribute to Arrnitage/CVE-2022-22947_exp development by creating an account on GitHub.

ReconPulse - A lightweight vulnerability scanner written in Python. Functional subdomain enumeration (passive + brute force), multi-threaded port scanning, and verification through PocSuite 3 POC. ...

PortSwigger is the UK-based security research company behind Burp Suite, the industry-standard web and API security testing platform used by penetration testers and enterprise AppSec teams worldwid...

Responsible PoC for a missing-authorization-check comment-triggered RCE finding in bazel-contrib/rules_cuda integration-tests.yaml (reported to Google Bug Hunters OSS VRP) - 2423gen-stack/rules-cud...

CVE-2025-55182 — Next.js Flight Deserialization RCE exploit with interactive shell, single-command execution and multi-payload reverse shell chain. For authorized penetration testing only. - dotnet...

A Burp Suite extension for viewing JWTs that actually gives you the space to view them. - zw00sh/burp-jwt-viewer

Contribute to 0xSt4rk007/ssrf development by creating an account on GitHub.

Tenant isolation, replay protection, signature verification, path traversal, SSRF, redaction, and CI supply-chain boundary tests. - messaging-intel-test/security-boundary-tests

POC FastAPI librariy application in a Jenkins pipeline to illustrate secured CI/CD, rollback and run-time persistence. - kekcoke/pykins

Local-first, modular static malware scanner: YARA, PE/JAR/APK/Office/PDF analysis, safe archive extraction, explainable verdicts, optional hash reputation lookups. - trashdino0/malware-scanner