架构分析智能体： 扫描项目全量代码，建立AST抽象语法树，识别违反设计模式或存在圈复杂度过高的模块。 安全审计智能体： 针对变更代码进行静态分析，检测SQL注入、XSS等常见漏洞，并生成修复建议。 重构执行智能体： 根据前两者的报告，自动生成重构后的代码补丁，并运行单元测试验证逻辑正确性。 交互反馈： 最终将审查报告和重构建议以PR评论的形式反馈给开发者，实现闭环。 - SmJer/-Cod...

PHi-C2 allows for a physical interpretation of a Hi-C contact matrix - soyashinkai/PHi-C2

n-day exploit benchmark + patchwatch CVE-to-binary-diff pipeline - stackviolator/ndaybench

This repository is for custom loader (calca.exe) and payload (usercpla.dll) -> Connecting to private Sliver C2 - KentMichaelA/Red_Teaming-Simulation

Total POC exploit CVE. Contribute to 32BitZ-Studio/Total-POC-CVE development by creating an account on GitHub.

RemoteRAT campaign analysis, IOCs, YARA rule, and publication page - JGoyd/RemoteRAT

Full-stack web app that detects SQLi, XSS, brute force, path traversal & scanner activity in Apache/Nginx access logs — Python/FastAPI backend + React/shadcn/ui dashboard. - Immxdium/Web-Lo...

Burp extension to upload a swagger and test the endpoints with multiple JWT + autofill parameters when available in Proxy tab. - t0-git/burp_swagger_tester

Manual, non-Metasploit authenticated Remote Code Execution (RCE) exploit via the browser URL bar for Webmin 1.580 (CVE-2012-2982) - marinovharisan/Webmin-1.580---file-show.cgi-Manual-Remote-Command...

Contribute to Mahfuzmridul/poc-exploit development by creating an account on GitHub.

A Burp Suite extension that seamlessly intercepts, decrypts, and re-encrypts AES-encrypted JSON payloads on the fly. - Re4lLife/AES-JSON-Native-Editor

XWiki Platform - CVE-2026-33137 PoC - Unauthenticated XAR Import via REST /wikis/{wikiName} - portbuster1337/CVE-2026-33137

🤖 Analyze and exploit command injection vulnerabilities in Unitree robots using BLE, enhancing cybersecurity and providing proof of concept for effective defense. - fromgabyaaye/UniPwn

Complete CosmicSting (CVE-2024-34102) exploit suite for Magento/Adobe Commerce XXE vulnerability - russellwork2021-lgtm/cosmicsting-cve-2024-34102-exploit

A Poc attempt at hunting suspicious thread creation events using ETW only. - 0xjbb/SuspiciousThreads

AI driven Command and Control for AI agents. Contribute to philcali/c2.ai development by creating an account on GitHub.

100% offline, single HTML file static analyser for SOC / DFIR triage — 70+ file formats, 1 Million row EVTX / PCAP / CSV timeline, 550+ YARA rules, VBA macro extraction, PE / ELF / Mach-O capabilit...

PenTesShield 是一个基于多Agent协作架构的渗透测试报告自动化生成平台，通过四个专业Agent（ReconAgent信息收集、VulnScannerAgent漏洞扫描、ExploitAgent验证利用、ReportGeneratorAgent报告生成）按优先级顺序协同工作，结合长链推理能力记录完整的分析决策过程，自动化完成从目标发现、漏洞识别、风险评估到报告输出的全流程，有效解...

copy_fail:CVE-2026-31431. Contribute to Iamliuxiaozhen/copy_fail development by creating an account on GitHub.

CVE-2026-33712 - Typebot <= 3.15.2 Unauthenticated SSRF via isolated-vm sandbox fetch - portbuster1337/CVE-2026-33712