goauth provides JWT-based authentication with anonymous sessions, refresh token rotation, CSRF protection, and pluggable token storage — without leaking application logic into your handlers. Desig...

A C#-based webshell management tool for penetration testing. - iss4cf0ng/Alien

AI-powered penetration testing framework with dual AI-engine support: GitHub Models (GPT-4o / GPT-5, cloud) and Ollama (Gemma4, Llama 3, local/offline) - Htunn/simple-exploit

Windows Server Active Directory IT automation cybersecurity PowerShell VBScript enterprise IT infrastructure scripting system administration identity management secure environments automation tools...

An enterprise adversary simulation lab using Sliver C2 and ELK SIEM to execute and detect MITRE ATT&CK-mapped attacks in a Purple Team environment. - Vivekkarna4/Adv-adversary-sim

Contribute to Jahia/jahia-csrf-guard development by creating an account on GitHub.

Command Injection in grub-btrfs initramfs hook - CVE-2026-25828 - cardosource/CVE-2026-25828

Secure authentication and authorization system built with Node.js, Express, MongoDB, and React. Features JWT access & refresh tokens, bcrypt password hashing, role-based authorization, 2FA,...

🎵 Inject music and ringtones directly into your iOS device, bypassing iTunes sync for seamless management of your media library. - miroslav1123/ByeTunes

This is a Cross Site Scripting Vulnerability scanner script. - Tamim-Haider/XSS-Scanner

Contribute to xxeneexx/xxenee development by creating an account on GitHub.

Self‑healing Gossip Mesh C2 with Assisted Peer Discovery, Modular Post‑Exploitation, and Scriptable Agents. - jm33-m0/emp3r0r

CSPBypass.com, a tool designed to help ethical hackers bypass restrictive Content Security Policies (CSP) and exploit XSS (Cross-Site Scripting) vulnerabilities on sites where injections are blocke...

使用C简单重构Beacon，适配CobaltStrike客户端. Contribute to CDipper/Beacon development by creating an account on GitHub.

Built a secure PHP authentication system with signup, login, password hashing, session management, and XSS protection. - KARTIKEYSHARMA18/php-auth-system

一个多源漏洞情报聚合工具，能够从多个权威安全数据源爬取漏洞信息，去重后生成结构化报告。支持自定义时间范围查询、多格式输出和自动化定时任务。 - wooluo/vuln_crawler