Herramienta ofensiva avanzada para la explotación automatizada de vulnerabilidades IDOR y CSRF, diseñada para Bug Bounty, Red Team y pentesters. Permite detectar referencias inseguras a objetos, ge...

Python CLI web vulnerability scanner — crawls target URLs and tests for SQLi, XSS, Open Redirect, missing security headers, and sensitive file exposure. Authenticated scanning supported via cookie ...

EdgeStealth-C2 is a Command and Control (C2) framework developed as a proof of concept for the academic research paper "Stealth at The Edge". - MoMhaidat05/EdgeStealth-C2

Spiral Guardian — Sovereign, open-source, MCP-native security agent for multi-device research infrastructure. Hub-and-spoke topology with Wazuh SIEM, YARA-X, osquery, Santa, Suricata, Falco. 8 MCP ...

Contribute to JoaquinHernandez/yara-performance-tester development by creating an account on GitHub.

🛠️ Build a minimal Linux kernel development and exploitation lab with panix, designed for kernel testing and debugging in a Docker environment. - Technos0855/panix

Collection of tools to analyze sliver C2 traffic. Contribute to charbel62/SliverC2-forensics development by creating an account on GitHub.

The objective was to identify suspicious activity, analyze related events, develop detection logic, classify incidents by severity, and recommend appropriate response actions. - chinedu-okoli07/Blu...

PoC: Shiori JWT CheckToken never re-validates account state (CVE-2026-71206, High 8.2) - Nel-droid/CVE-2026-71206-PoC

PoC: Grafana Editor role deletes protected contact points (CVE-2026-72585, Medium 6.5) - Nel-droid/CVE-2026-72585-PoC

PoC: changedetection.io unlimited login brute-force, no rate limiting (CVE-2026-71205, Medium 6.5) - Nel-droid/CVE-2026-71205-PoC

PoC: changedetection.io unauthenticated OpenAPI schema disclosure (CVE-2026-71203, Medium 5.3) - Nel-droid/CVE-2026-71203-PoC

Delay alerts for Finnish cargo rail: a Go service over Postgres that notifies once per train per day, with duplicate suppression enforced by the database rather than application code. - calemccammo...

Penetration testing framework. Run the tools you already use; Raven captures the output, tracks findings, and generates the report. - chamberdoorsecurity/raven

A professional Python-based web application vulnerability scanner that detects security header issues, TLS/SSL problems, risky HTTP methods, exposed resources, cookies, and technology disclosure. -...

onyx — local-first WordPress vulnerability scanner. Reads the Wordfence feed from disk, no API, no accounts. MIT. - Boreas37/onyx

Claude Code skill: mine JavaScript bundles (live host / dir / URL list / Burp MCP proxy history) for hidden endpoints, params, secrets, feature flags, and authz logic. - z3r0s6/js-analysis-skill

Contribute to blackbox-ops/figma-ssrf-poc development by creating an account on GitHub.

Public writeup, PoC, and emulation materials for CVE-2026-6837 affecting Zyxel export-cgi PKCS#12 export handling. - minanagehsalalma/CVE-2026-6837-zyxel-export-cgi-command-injection

Public writeup, PoC, and emulation materials for CVE-2026-8508 affecting Zyxel captive-portal social login. - minanagehsalalma/zyxel-social-login-bypass-cve-2026-8508