A Command and Control Framework to be released for Ubuntu 20.04/22.04 - itsnold/Nagomio-C2

Local AI-augmented offensive-security scanner: attack surface, CVE+exploitability, client-side intel, lab-mode verification, exploit-chain correlation. Authorization-gated. - supamanluva/Celsius

Debugger for macOS. Multi-pane TUI wrapping lldb: syscall/network tracer, anti-debug bypass, memory search. For reverse engineers and malware analysts. x64dbg-alternative for Apple Silicon. - MZHea...

Praxion — Cross-platform USB malware scanner that auto-detects removable drives, scans files with YARA rules, PE/ELF/Mach-O analysis, ClamAV, and VirusTotal, then quarantines threats automatically....

Suka suka lah. Contribute to BimaBalance/Cve-2026-27944-Tools-Exploit development by creating an account on GitHub.

An AI driven, authorized bug bounty toolkit. A browser extension and a Burp extension feed a local agent that runs recon, scope gated probing, triage, exploit chaining, CVSS, PoC, and report ready ...

BCheck Helper is a Burp Suite extension that helps finding and importing BChecks scripts into Burp. These can easily be loaded from either a GitHub repository, network fileshare or a local filesyst...

【Java计算机毕业设计分享】基于Jboss的渗透测试管理系统，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - ibislon/TatvjrhSOt

A light weight vulnerability scanner in development phase - shubhamrawat0044/SecureScan

This repository provides a complete, pre-configured environment for web hacking practice, including the classic **SQLi-Labs** and integrated **WAF Bypass Labs** (Java/Tomcat), all running seamlessl...

【Python计算机毕业设计分享】基于Python的注入漏洞扫描工具研究及防护实现，MySQL Python开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - ijabyregra/tGkuZBPPIg

Intentionally vulnerable e-commerce web app (PHP/MySQL + Node.js/MongoDB) built for hands-on penetration testing practice. Covers 13 documented vulnerabilities across SQLi, NoSQLi, XSS, IDOR, CSRF,...

Security scanner for MCP servers — vet an MCP before you wire it into an agent. Detects prompt-injection, credential exfiltration (via taint analysis), RCE, and supply-chain risks, and catches cros...

XSS-VIPER - Ultimate XSS Framework (2026). WAF bypass, auto-exploit, stealth mode, DOM detection, C2 callbacks & Termux support. Built for red teams & bug hunters. Strike Anywhere, ...

Enter a URL and see a real request dissected across the 7 OSI layers — DNS, TCP, TLS handshake & certificate, HTTP. Python stdlib backend, SSRF-hardened. - vladislavtaran/osi-explorer

Red Teamer · Active Directory Exploitation · Sliver C2 · Web AppSec | OSCP | CEH | CPTS - HeavyGhost-le/HeavyGhost-le.github.io

教育行业 SRC 弱口令字典生成工具 — 基于真实用户密码习惯 curated 模式. Contribute to Clam0428/edu-password-generator development by creating an account on GitHub.

My exploit scripts and vulnerability write-ups for OpenZeppelin's Ethernaut wargame, built with Foundry. - DiaBmond/ethernaut-solutions-foundry