Stars
Proof of concept for CVE-2026-102578, a Moodle question-bank SQL injection
real time face swap and one-click video deepfake with only a single image
mrhenrike / Deep-Live-Cam
Forked from hacksider/Deep-Live-Camreal time face swap and one-click video deepfake with only a single image
Palantine - Security Agent Powered by hinoki.security's offensive model
Synthetic Log generation tool for multiple log sources
Fast, zero-dependency credential testing tool in Go. Brute force SSH, MySQL, PostgreSQL, Redis, MongoDB, SMB, and 20+ protocols. Hydra alternative with native nerva/naabu pipeline integration.
A plain-language security check for AllStarLink 3 (ASL3) nodes. Checks for the PHP2Shell flaws (CVE-2026-109618, CVE-2026-109619), pending updates, exposure, and SSH settings.
🚀 HYPERION Elite Bot v5.0 - The Ultimate MEGA.nz Checker Telegram Bot with AI-Powered Analysis, Recovery Key Extraction, and Cloud Deployment Ready
An offensive-security methodology that an AI coding agent can actually execute — 88 class docs, 6 agents, 24 scripts, evidence-first validation. Authorized testing only.
phpfuck: using only 5 different characters to write and execute php // (^.9)
Free, open-source smart TV remote for Android and iPhone. Custom layouts, local Wi-Fi control, and English/Russian interfaces. MIT licensed.
Offline decryption of Chrome App-Bound Encryption (v10/v20) — passwords, cookies, payment methods. No live system required.
A PoC tool for the Pass-ta-key Golden Attack, covering the extraction of the Google Password Manager Security Domain Secret from Chrome process memory, and the decryption of synced GPM passkeys for…
jockerjml / HorusEye
Forked from Omar-tamerr/HorusEyeFind the fix that breaks the most routes to Domain Admin. Maps Active Directory attack paths with evidence, compares remediation options side by side, and produces an offline report for red and blu…
Find the fix that breaks the most routes to Domain Admin. Maps Active Directory attack paths with evidence, compares remediation options side by side, and produces an offline report for red and blu…
CVE-2026-111585 — TeamViewer Remote-Control Screen Decompression Integer Overflow → Heap Buffer Overflow (PoC, fixed in 15.83, CVSS 8.8). Containerized lab + one-command repro with vulnerable/fixed…
CVE-2026-120218: bilingual TypeMill stored XSS analysis and safe SVG/XSLT PoC
AiScan-N 来了！这是一款基于人工智能驱动的Ai自动化网络安全（运维）工具，专注于网络安全评估、漏洞扫描、运维、应急响应、渗透测试自动化，Ai大模型工具集【CLI Agent】 ，Ai驱动的安全检测技术，提升安全测试（运维）效率，专为企业和个人用户打造，尤其适合初学者（小白）快速上手使用，让你轻松迈入智能安全攻防时代！适用场景 ：如（红队演练、CTF比赛、Web应用渗透测试、内网横向移…
Refusal-direction abliteration pipeline: matched-pair extraction, inference-time projection removal, honest evals. Qwen2.5-1.5B: 97.5%->0% refusal, 0% false-refusal, +57% ppl.
Collection of Cyber Threat Intelligence sources from the deep and dark web
Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.
CVE-2026-111497 RCE PoC for one pinned Docker Official Image for WordPress
A 135+ tool DFIR toolkit, a live self-updating threat-intel platform, and a 332-tool MCP server — on one Cloudflare Workers deploy. MIT licensed. Portfolio: pranithjain.qzz.io
This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version contains a wordlist of all the files directories for this version.
Velum-VMM: a Windows x64 research hypervisor with Intel VT-x, per-CPU EPT, syscall and kernel-entry hooks, live telemetry, scoped request policies, CPUID controls and TSC offsetting. Written in C a…
A list of useful Powershell scripts with 100% AV bypass (At the time of publication).