A zero-config Python AST linter that flags unsafe loading of an ML model/artifact (torch.load without weights_only, pickle/joblib/dill.load, np.load allow_pickle, keras load_model, yaml.load) - arb...

AI-assisted self-healing CI/CD platform POC with FastAPI services, Docker, Kubernetes, GitHub Actions, LangGraph RCA agents, verification, and human-reviewed remediation PRs. - narayanareddy11/ai-s...

C2 Control Center — deploy, manage, and destroy C2 frameworks (Mythic, Sliver) from one CLI - CR1MS0N-Operator/c4

WAF evasion testing toolkit. Grammar + encoding mutation, dialect-specific bypasses, evolutionary search, per-WAF gene-bank persistence. Rust. - santhreal/wafrift

A fast, reactive graphical interface (GUI) for managing Sliver C2 operations, powered by Wails and Svelte. - Gubarz/siren

CVE-2022-22947 Exploit script. Contribute to Arrnitage/CVE-2022-22947_exp development by creating an account on GitHub.

ReconPulse - A lightweight vulnerability scanner written in Python. Functional subdomain enumeration (passive + brute force), multi-threaded port scanning, and verification through PocSuite 3 POC. ...

PortSwigger is the UK-based security research company behind Burp Suite, the industry-standard web and API security testing platform used by penetration testers and enterprise AppSec teams worldwid...

Responsible PoC for a missing-authorization-check comment-triggered RCE finding in bazel-contrib/rules_cuda integration-tests.yaml (reported to Google Bug Hunters OSS VRP) - 2423gen-stack/rules-cud...

CVE-2025-55182 — Next.js Flight Deserialization RCE exploit with interactive shell, single-command execution and multi-payload reverse shell chain. For authorized penetration testing only. - dotnet...

A Burp Suite extension for viewing JWTs that actually gives you the space to view them. - zw00sh/burp-jwt-viewer

Contribute to 0xSt4rk007/ssrf development by creating an account on GitHub.

Tenant isolation, replay protection, signature verification, path traversal, SSRF, redaction, and CI supply-chain boundary tests. - messaging-intel-test/security-boundary-tests

POC FastAPI librariy application in a Jenkins pipeline to illustrate secured CI/CD, rollback and run-time persistence. - kekcoke/pykins

Local-first, modular static malware scanner: YARA, PE/JAR/APK/Office/PDF analysis, safe archive extraction, explainable verdicts, optional hash reputation lookups. - trashdino0/malware-scanner

CVE-2025-5781 FreePBX Exploit POC. Contribute to jasonbernier/CVE-2025-5781 development by creating an account on GitHub.

Generate YARA rules from Windows API hashes for malware detection and hunting. - tbarabosch/apihash_to_yara

这是一个面向多项目维护者的自动化工具，旨在自动处理 Dependabot 和 Code Scanning 产生的大量简单、重复的告警修复工作，如依赖版本升级、安全漏洞修复等，从而显著提升维护效率。 - dependfix/dependfix

Free open-source IP rotation proxy (SOCKS5/HTTP) + Burp extension for people without money - BlasterX24/ip-rotator-free

A Rust-based tool for staged remote process injection via IPC orchestration in Windows. It bypasses EDR flagging and avoids noisy shellcode by separating the dormant stager (pipe server) from the e...