Elite exploitation toolkit for CVE-2025-55182 (React Server Components RCE). Async polymorphic payloads, advanced WAF/CDN bypass, proxy rotation, Shodan/Censys mass scan, auto-pwn + reverse shells,...

多诱饵紧凑型无状态SSH蜜罐，包含假Claude、Codex、Cursor、云平台与运维凭据，支持任意账户密码、公钥及交互认证，模拟Linux文件系统、网络、防火墙和常用命令，实时记录来源、凭据、命令与行为，并提供Web审计控制台 - ra1nyxin/sshfakekeyhome

A modular C2 framework for studying agent communication, remote tasking, and endpoint security in controlled environments. - Oreki0504/Argus-C2

Web application security testing project covering SQL Injection, Stored XSS, Reflected XSS and CSRF using DVWA. - rutujalkhade2026/Cybersecurity-internship-task-3

An advanced, context-aware input sanitizer and XSS detection engine written in Python. Performs structural tokenization, recursive obfuscation decoding (URL, Base64, HTML entities), and context-sen...

Modular web vulnerability scanner and security assessment framework. 🚧 Under Development - Mayank045/Web-VulnScan

Shellcode Loader. Contribute to lukehebe/SleepyLoader development by creating an account on GitHub.

Contribute to MinhHK68/CVE-2026-13736 development by creating an account on GitHub.

HIPR (Hardened Isolated Proxy Runtime) — A fault-tolerant, async egress proxy and outbound guardrail engine built with FastAPI and HTTPX. Features phase-decoupled timeouts, exponential backoff with...

Secure-defaults drop-in shim for LangChain: SSRF-checked loaders, deserialization allowlisting, jinja2 SSTI gate, human-approval-gated tools. MIT. From Hedgerow. - hedgerow-dev/langchain-hardened

An enterprise file upload security engine written in Python. Protects applications against Remote Code Execution (RCE), Unrestricted File Upload vulnerabilities, Polyglot web shells, and MIME-type ...

API Access-Control vulnerability scanner: source scan (Semgrep) + domain auth-swap BOLA testing. Node/Express web UI + Python/FastAPI scanner. - Fokkio/api-ac-scanner

Repository for Command-and-Control (C2) framework for adversary simulation - kelvinweijun/dark-arts

Devops Exp 3. Contribute to kavyatelavane2005/calculator-jenkins development by creating an account on GitHub.

Contribute to K3ysTr0K3R/CVE-2026-9198 development by creating an account on GitHub.

Onyx — local-first WordPress vulnerability scanner'ın veri mirror'ı (Wordfence Production Feed, günlük güncel, commercial-free) - Boreas37/onyx-db

Hands-on binary exploitation and reverse engineering project focused on analyzing vulnerabilities, memory corruption, buffer overflows, and low-level system mechanics using GDB, PEDA, Ghidra, and R...

JS 侦察工具 —— 一站式 JS 信息收集 / 敏感信息提取 / API 发现，单二进制免环境跨平台。 - eonun/jsscout

Multi-component remote administration / C2 framework (authorized red teaming and research use) - almahasher016-lang/M7MD-RAT-NG

Python-based network vulnerability scanner using Nmap, vulnerability rules, version checking, CVE matching, risk scoring, and HTML reporting. - yazhiniM29/network-vulnerability-scanner