A Burp Suite extension for creating and editing JSON Web Tokens. This tool supports signing and verification of JWS, encryption and decryption of JWE and automation of several well-known attacks ag...

Forget complex command lines. Complete professional penetration testing with natural language.告别复杂的命令行，用自然语言完成专业渗透测试。 - crazyMarky/pentest-skills

Bypass Google Virus warning page with download anyway button when your trying to download larger file from google drive >100 MBs - Clovie8/googledrive-bypass

Sandboxed HTTP client with SSRF protection for AI agents. Prevents DNS rebinding, blocks private IPs, and validates every connection — available as a Rust crate and npm package. - Parassharmaa/agen...

A Python agent targeting Linux for Mythic C2. Contribute to 0xbbuddha/hermes development by creating an account on GitHub.

Web cache poisoning detection from the command line. No Burp Suite required. - invaen/venom-cache

Contribute to PinPin1140/cve-2026-21509 development by creating an account on GitHub.

ModioDirect is a lightweight, single-file CLI that reliably downloads mods straight from mod.io via the official API—safe, fast, and free for use. Supports manual API-key downloads, bypassing the o...

🛡️ A Python-based Backdoor Proof-of-Concept (PoC) demonstrating C2 communication, persistence mechanisms, and remote command execution for educational analysis. - Salahidk/Backdoor

Contribute to TheDudesRepo/BurpAIAnalyst development by creating an account on GitHub.

Proof of Concept for a Server-Side Template Injection (SSTI) vulnerability in Calibre’s Templite engine (GHSA-xrh9-w7qx-3gcc). Demonstrates arbitrary Python code execution via user-supplied HTML ex...

🔍! This is the WEB-scanner tool which is made for reduse time for scanning vulnerability on website. This noscript has the power to detect sql, xss, CSRF, file & command injection on the url ...

Node.js/TypeScript HTTP client with browser TLS fingerprint impersonation (JA3/JA4). Bypass Cloudflare and anti-bot detection. Rust-powered, fetch()-compatible. - sqdshguy/wreq-js

a minimal C2 implementation for taking the CPTS exam - GitHub - stina-sh/C2_cpts: a minimal C2 implementation for taking the CPTS exam

This project focuses on the design and development of a practical toolkit for password policy testing and credential security assessment. Weak passwords are among the most exploited vulnerabilities...

Proof of Concept for CVE-2026-0770 - Langflow Remote Code Execution - affix/CVE-2026-0770-PoC

🧪 VulnLabz is a hacker-style test lab for your web app: run security regression scenarios (SQLi, IDOR, SSRF, brute force) and catch broken defenses before release. - l0s0s/VulnLabz

a webpage for the occasional CSRF CTF style post request challenge - CyberVolcano/cybervolcano.github.io

🍪 百度Cookie自动保活工具 | BDUSS验证+注入登录+定时保活 | 4方法交叉验证+投票机制 | Python自动化脚本 | Selenium+Requests | 百度贴吧/网盘/好看视频全平台保活 - 1837620622/baidu-cookie-manager