jiwoochris / artex-global
ARTEX 한국어판 · AI 자율 침투 테스트 프레임워크(upstream: Autumn-27/ARTEX, AGPL-3.0)
jiwoochris / artex-global
mdpsec / bug-bounty-hunting-prompts
Reusable prompts for a structured, evidence-first bug bounty hunting workflow
3641397194-wq / gpt6-Astra
gpt6 Astra-claude-grok4.7-deepseekv4.1flash-glm5.3-gemini破甲越狱 · 冷咖啡 BREAK//OPEN 工作台
threathunterX / underground-slang-lexicon
A continuously updated lexicon of underground slang in the online fraud and gray-market economy: definitions, supply-chain roles, sanitized real-world usage and false-positive warnings. Chinese-dominant, with Brazilian Portuguese, English, Indonesian, Tagalog and Vietnamese entries. Maintained by the Threat Hunter research team.
0xMarcio / pocindex
Search public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context.
Kritt-ai / open-kritt
Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.
chris-ritsen / samsung-tv-root
Samsung QN90B and QN90F root
google / security-research
This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.
GhostESP-Revival / GhostESP
The open-source wireless research platform for ESP32.
openbin-ai / binny
BINNY: an open source agent harness for reverse engineering. Plug in any model, or a local one.
laoshu666 / hermes-seagull
🦅 Seagull Profile - Unrestricted CTF/Red-team AI personality for Hermes Agent | 海鸥破甲人格
7h30th3r0n3 / Flipper-EvilRelay
ISO-DEP (ISO 14443-4) NFC relay for the Flipper Zero. Read a real contactless card on a phone/Evil-Cardputer, relay APDUs over Wi-Fi to an ESP32-C3 bridge, and emulate the card to the reader with the Flipper. Ported from Evil-M5Project.
pashov / skills
Pashov Audit Group Skills
xalgorix / xalgorix
Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.
berylliumsec / nebula
Cybersecurity Harness
darama22 / Malware-Research-Hub
Self-contained malware research hub: curated catalog of 80 families (1971-2024) + 2,764 real encrypted samples, indexed and searchable. Local Flask app, bilingual.
ImKKingshuk / LockKnife
LockKnife: The Ultimate Android Security Research Tool. A unified TUI workspace and headless CLI for deep Android security research, built for researchers and hackers. Powered by Python orchestration and a Rust-accelerated core, enabling AI agent–driven hacking, credential recovery/cracking, APK analysis, intelligence gathering, runtime inspection.
0sec-labs / 0
The AI offensive security OS - open, self-improving, extensible. Find, verify, and fix vulnerabilities 24/7.
Huai-Tian / GeptHooks
General EPT hook framework for Windows (Windows 10 - 11)
Huai-Tian / GnptHooks
General NPT hook framework for Windows (Windows 10 - 11)
7wp81x / NRSuite-Android
No-root Android + ESP32 Wi-Fi/BLE security testing toolkit. Deauth, captive portal, packet capture, BLE HID, and defense/detection modules, controlled over USB-OTG, no custom kernel or external adapter required.
eldarshiraliyev / BugScanner
🐛 Advanced web vulnerability scanner with 5-rule false-positive reduction, WAF evasion, and modern HTML reports
ByteV0rtex / CVE-2026-65343
CVE-2026-65343 PoC — AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71)
jiker666 / src-6k-security-research-skills
SRC-6K Security Research Skills: black-box SRC and white-box audit agent package
SyntaxMethod / CVE-2026-42978-PoC-Research
CVE-2026-42978 Windows Push Notifications (WpnService) Use-After-Free & Race Condition PoC research, diagnostic scanner, and security audit module for AI Security Tool.
SyntaxMethod / CVE-2026-41089-Netlogon-RCE-PoC
CVE-2026-41089 Netlogon RCE PoC — security research, vulnerability validation & defensive testing.
DeathShotXD / Comment2Shell
Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker
BushANQ / DRX-Operator
—
xiaoliu07-sudo / xiaoliu-pojia
小liu破甲 - Codex CLI jailbreak prompt and one-click deploy tool. 基于CTF框架的Codex破甲提示词与一键部署工具
HackingLZ / sleepwalker
Passive backdoor implant that sniffs for a covert magic-packet trigger and runs tasks written in a custom 23-opcode bytecode command language.
Blackfrost-AI / Cyber-Frost-Harness
Native red, blue, and purple security-agent harness for CYBER-FROST
monovibe / s26u-m3q-temp-root
Temporary KernelSU root and LSPosed recovery app for Galaxy S26 Ultra SM-S948N AZG3
dinosn / security-research-orchestrator-prompt
High-assurance, artifact-agnostic prompt for authorized security labs, exploit-chain research, PoC validation, and evidence-led reporting.
pverhoeven74 / Crypto-Clipper
Crypto Clipper is a cross-platform clipboard monitoring and builder tool for BTC, ETH, SOL, TRX, LTC, and DOGE address detection. Features include regex matching, address validation, activity logs, custom rules, clipboard history, UI customization, and standalone client generation for Windows, Linux, and macOS with embedded settings.
mdpsec / should-i-submit
A local, safety-first pre-submission reviewer for bug bounty reports.
Justinuse1 / pojia-breaker
Chinese-first LLM jailbreak benchmark & red-team toolkit | 中文LLM安全评测框架 | by POJIA.AI
dawwinci / agile-net-devirtualizer
Generic devirtualizer for Agile.NET (SecureTeam/CodeVeil) VM-based method protection — reconstructs CIL by reverse-engineering the runtime DLL structurally, no hardcoded per-build opcode tables.
shiedless / tencent-ace-anogs-notes
How Tencent ACE (anogs) anti-cheat is built on iOS, and why naive attacks fail. Analysis, not a bypass
wpfyorg / idu-unlock
Unlock a Jio IDU or Jio AirFiber router: persistent root SSH, a full flash backup, and a route to OpenWrt. Supports JIDU 6j01 and 6j11 models.
sys-dissect / jiopc-architecture-whitepaper
Forensic reverse-engineering, hardware benchmarks, and architectural security analysis of JioPC Cloud Virtual Desktops (Accops HyWorks / Azure).
dinosn / log4j-4255
End-to-end Docker lab reproducing Apache log4j2 #4255 — FilteredObjectInputStream allowlist bypass via java.rmi.MarshalledObject (unfiltered deserialization → RCE) on Log4j 2.26.1 / JDK 17.
CircuitSavage / cloudflare-turnstile-reversed
Cloudflare Turnstile challenge internals: the live request flow, the challenge bundle, and a capture toolkit.