chaitin / SafeLine

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

ZeroDayEvil / CVE-2026-54121-Certighost

🛡 Official AI Security Tool module for CVE-2026-54121 (Certighost): AD CS certificate abuse deep-dive, defensive audit workflows, and safe in-app console execution for authorized Active Directory security testing.

Icontainertia / Adobe-Substance-3d

Creative Studio App 2026 – Full working installer with enhanced security protocols for secure digital asset deployment.

SplendorCooper / ExitLag

Exitlag 1.5: Full working installer for optimized desktop performance, ready to run in 2024.

tiagozip / cap

privacy-first, open-source and self-hosted CAPTCHA alternative with PoW and instrumentation challenges.

altcha-org / altcha

GDPR, WCAG 2.2 AA, and EAA compliant, self-hosted CAPTCHA alternative with PoW mechanism.

firehol / blocklist-ipsets

ipsets dynamically updated with firehol's update-ipsets.sh script

velobase / velobase-harness

All AI developers deserve to get paid. Turn your AI prototype into a paid SaaS with open-source infrastructure for usage billing, payments, attribution, affiliates, anti-abuse, and deployment.

ADScanPro / Claude-AD

Active Directory pentest methodology for Claude Code: skills, agents and slash commands for internal AD red-team work (Kerberoasting, ADCS ESC1-17, DCSync, ACL abuse, NTLM relay, delegation), with per-technique OPSEC/telemetry notes. Drives netexec, impacket, certipy, bloodyAD, BloodHound CE.

alexandreborges / malwoverview

Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.

tirrenotechnologies / tirreno

tirreno is a framework for building sovereign security, compliance and fraud prevention applications. Detect account takeovers, cyberfraud and business logic abuse inside your product.

S12cybersecurity / LogonStealer

Abuses the Credential Provider interface to steal plaintext passwords from logonui.exe via CredProvDataModel.dll hooks

borestad / blocklist-abuseipdb

Aggregated AbuseIPDB blocklists with worst IPv4 & IPv6 offenders (~99% confidence)

ADHDMurky / ADCS_Tools

Tools for CES abuse

shoebpate1 / ai-agent-hacking-writeups

A collection of public writeups on attacks against AI agents: prompt injection, tool abuse, memory poisoning, and data exfiltration.

kiwi0719 / jev-edge

Typed-judgment admission control at the traffic edge: three-layer prompt-injection and abuse filter for nginx/OpenResty, powered by TypeSafe Jev. Fail-open, cached, hot-reloadable.

mohammad-alattas / APISignature

APISignature is a plugin for x64dbg that help the malware analysts & reverse engineers during analysis by adding a reference for more than 44,000+ API functions for Microsoft API documents & additional section about how to abuse the API function.

armourinfosec / Offensive-Windows-Privilege-Escalation

Offensive Windows Privilege Escalation — hands-on study notes: enumeration & methodology, service/scheduled-task misconfigs, UAC bypass, token-privilege abuse, the potato family, kernel exploits, and credential mining. Each technique with detection & defenses. CC BY 4.0.

tc4dy / CVE-2026-54121-PoC-Exploit

CVE-2026-54121 - CertiGhost AD CS Multi-Exploit Framework | Rogue DC + LDAP spoofing, certificate abuse, PKINIT hash extraction, auto DCSync. Safe Checker + full exploit, multi-threaded mass scan, Shodan integration, JSON/CSV/JSONL output. CVSS 8.8 High. Use Ethically, Stay Legal :v

security-attack / RingKiller

RingKiller — BYOD PoC for vulnerable driver DCRCVDrv.sys. Abuses IOCTL 0x2205C0 to kill arbitrary processes from ring 0 via ZwTerminateProcess. EDR/AV termination primitive. Lab only.

jmiller1309 / taktik-bot-updated

Instagram & TikTok automation via real All devices. Likes, follows, DMs, scraping. No API abuse. Built with Python, uiautomator2

google / recaptcha

PHP client library for reCAPTCHA, a free service to protect your website from spam and abuse.

GhostPack / Certify

Active Directory certificate abuse.

ricardojoserf / CrystalPotato

Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscation. Run commands, reverse shells or add users

dirkjanm / krbrelayx

Kerberos relaying and unconstrained delegation abuse toolkit