Burp Suite extension + CLI that scrubs client identity (hostnames, IPs, brand names) from pentest traffic before it reaches AI assistants. Drop-in Claude Code hook integration. Java 17, no Python. ...

Perform mutation testing on individual Java files with coverage analysis and differential mutation to improve test effectiveness efficiently. - tonguingandgroovingplanevulvitis603/mutate4java

loader. Contribute to 6K4P-lamp/simple_shellcode_loader development by creating an account on GitHub.

Next-generation TCP/IP fingerprint alignment platform. Bypass Cloudflare, Akamai, Imperva & F5 WAF with uTLS JA3/JA4 spoofing, TCP/IP SYN tuning, HTTP/2 stream manipulation, and global DNS ...

PoC — pqhaz3925/ccweb Unauthenticated RCE via Claude Code (CVSS 10.0) - BlessedOn3/poc-ccweb-unauth-rce

PoC — iabdullahmumtaz/DeployHive Unauthenticated RCE via Docker + npm (CVSS 10.0) - BlessedOn3/poc-deployhive-unauth-rce

KVC enables unsigned driver loading via DSE bypass (g_CiOptions patch, skci.dll hijack, SeCiCallbacks redirection) and PP/PPL manipulation for LSASS memory dumping on modern Windows with HVCI/VBS. ...

PoC — WonderCMS 3.6.0 Stored XSS (GHSA-5x7j-xjpx-pmm5) - BlessedOn3/poc-wondercms-360-xss

Contribute to LeenearKeenear/yara-grep development by creating an account on GitHub.

Contribute to 0x00phantom-hat/Hoverfly-1.11.3-RCE-CVE-2025-54123-Exploit development by creating an account on GitHub.

Simple xss vulnerable web forum application aimed to test ways to execute stored xss attacks - anderson2dev/xss-lab

All Nuclei Templates. Contribute to adampielak/nuclei-templates development by creating an account on GitHub.

Open source ASM using only free tools. Searches for subdomains, checks life hosts, scans open ports, runs nuclei templates, pulls known emails, and pulls breached creds from free sources. - DerekHa...

A deliberately vulnerable Java Maven application showcasing common insecure dependencies and unsafe deserialization patterns (Jackson, SnakeYAML, Log4j, Commons-Collections). Designed for security ...

Behavioural traffic mimicry C2 transport plugin for Sliver - Emul4nt/echolalia

YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA - CybercentreCanada/CCCS-Yara

🛡️ Safe Kubernetes sessions for AI agents. Contribute to kubeply/kply development by creating an account on GitHub.

Security awareness tooling demonstrating VSCode extension abuse, reverse shell delivery, and Firefox session cookie theft — for authorised penetration testing and internal security awareness demons...

医院网络安全漏洞响应值班情境模拟演练系统，内置漏洞处置状态机引擎、决策偏差分析与JSONL审计日志，支持FastAPI查询和Typer CLI启动，可导出HTML/PDF格式等保2.0整改举证材料，面向信息科值班员和质控办复盘训练 - nexorin9/cyber-drill-simulator

Contribute to Spidle/Custom-Nuclei-Templates development by creating an account on GitHub.