A passive Burp Suite extension for capturing, inspecting, classifying, and exporting application-level WebSocket messages. - Blueeyes3/websocket-scribe

Modular Command & Control framework for authorized security testing - theanonspider/Spider-C2

Denied-comms C2 fusion framework - deterministic edge-native sensor fusion - Polybolos-Institute/polybolos-denied-comms-c2

Enterprise-grade File Upload Security Scanner built with Python, Flask, YARA, REST API, 2FA, and Security Analytics. - HackForgeX/securefile-scanner-enterprise

Contribute to bloggins/AES_DLL_ShellcodeLoader development by creating an account on GitHub.

Eğitim amaçlı geliştirilmiş, içerisinde kasıtlı olarak siber güvenlik zafiyetleri (SQLi, XSS, Command Injection) barındıran basit bir Node.js laboratuvar ortamı. - Pavlushkax/zafiyet-lab

A Python-based web vulnerability scanner for educational and authorized security testing. Features website reconnaissance, crawling, HTTP header analysis, SSL/TLS checks, SQLi & XSS detecti...

IP Rotation from different providers - Like FireProx but for GCP, Azure, Alibaba and CloudFlare - ZephrFish/OmniProx

Python Flask based Website Security Vulnerability Scanner. Features: • SSL Checker • XSS Detection • SQL Injection Testing • Security Header Analysis • Port Scanner - Shubhambhanuse/Web-Security-V...

Python/Flask web vulnerability scanner — detects missing security headers, weak cookies, reflected XSS, and SQL injection (error-based + time-based blind). Built to understand detection logic behin...

Contribute to changjiaqiu/fastjson-testDemo development by creating an account on GitHub.

Hacked together script for feeding urls into Burp's Sitemap - ZephrFish/BurpFeed

Python-based Web Vulnerability Scanner that automates security assessment by analyzing HTTP headers, cookie security, server information disclosure, OWASP Top 10 misconfigurations, SQL Injection, X...

Standalone CVE-2026-43499 PoC for Galaxy A34 SM-A346E A346EXXSEEZC7 - FuCnox/CVE-2026-43499-A34

Tplink wr841 v10 rce exploit. Contribute to ilizavr/CVE-2022-24355 development by creating an account on GitHub.

Single click Remote Code Execution exploit targeting Gajim on devices with KDE Plasma. - thefreestyleresearcher/CVE-2025-49091-Gajim-RCE

Contribute to naix1337/Sivon-RAT development by creating an account on GitHub.

A Burp Suite extension that extracts JavaScript file URLs from your sitemap — either from a single page or recursively across an entire domain. Extracted URLs are saved to a file with ready-to-run ...

A repo of 𝗌̶𝗍̶𝗈̶𝗅̶𝖾̶𝗇̶ burrowed bofs from Cobalt Strike and other popular github bofs that could make sliver extra spicy. - s4wbvnny/burrowed-bofs

Sliver extension that runs the ligolo-ng agent as a shared library (DLL/SO) for in-memory tunnelling. - s4wbvnny/ligolo-bof