Windows 10/11 双网卡(外网+内网)路由一键配置与恢复工具，纯 Python 标准库 + tkinter GUI，支持自动备份/恢复、UAC 提权、DHCP 默认路由守护 - MushGrowth/dual-nic-route-tool

CurlCraft lets you paste any cURL command directly into Burp Suite and send it to Repeater or Intruder in one click — supporting REST, SOAP, GraphQL, multipart, and URL-encoded requests out of the ...

Burp Suite extension + CLI that scrubs client identity (hostnames, IPs, brand names) from pentest traffic before it reaches AI assistants. Drop-in Claude Code hook integration. Java 17, no Python. ...

Perform mutation testing on individual Java files with coverage analysis and differential mutation to improve test effectiveness efficiently. - tonguingandgroovingplanevulvitis603/mutate4java

loader. Contribute to 6K4P-lamp/simple_shellcode_loader development by creating an account on GitHub.

Next-generation TCP/IP fingerprint alignment platform. Bypass Cloudflare, Akamai, Imperva & F5 WAF with uTLS JA3/JA4 spoofing, TCP/IP SYN tuning, HTTP/2 stream manipulation, and global DNS ...

PoC — pqhaz3925/ccweb Unauthenticated RCE via Claude Code (CVSS 10.0) - BlessedOn3/poc-ccweb-unauth-rce

PoC — iabdullahmumtaz/DeployHive Unauthenticated RCE via Docker + npm (CVSS 10.0) - BlessedOn3/poc-deployhive-unauth-rce

KVC enables unsigned driver loading via DSE bypass (g_CiOptions patch, skci.dll hijack, SeCiCallbacks redirection) and PP/PPL manipulation for LSASS memory dumping on modern Windows with HVCI/VBS. ...

PoC — WonderCMS 3.6.0 Stored XSS (GHSA-5x7j-xjpx-pmm5) - BlessedOn3/poc-wondercms-360-xss

Contribute to LeenearKeenear/yara-grep development by creating an account on GitHub.

Contribute to 0x00phantom-hat/Hoverfly-1.11.3-RCE-CVE-2025-54123-Exploit development by creating an account on GitHub.

Simple xss vulnerable web forum application aimed to test ways to execute stored xss attacks - anderson2dev/xss-lab

All Nuclei Templates. Contribute to adampielak/nuclei-templates development by creating an account on GitHub.

Open source ASM using only free tools. Searches for subdomains, checks life hosts, scans open ports, runs nuclei templates, pulls known emails, and pulls breached creds from free sources. - DerekHa...

A deliberately vulnerable Java Maven application showcasing common insecure dependencies and unsafe deserialization patterns (Jackson, SnakeYAML, Log4j, Commons-Collections). Designed for security ...

Behavioural traffic mimicry C2 transport plugin for Sliver - Emul4nt/echolalia

YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA - CybercentreCanada/CCCS-Yara

🛡️ Safe Kubernetes sessions for AI agents. Contribute to kubeply/kply development by creating an account on GitHub.

Security awareness tooling demonstrating VSCode extension abuse, reverse shell delivery, and Firefox session cookie theft — for authorised penetration testing and internal security awareness demons...