everything-claude-code

完整的 Claude Code 配置集合——涵盖智能体、技能、钩子、命令、规则及 MCPs。源自 Anthropic 黑客松获胜者的经实战检验配置。...

Exploit for Uncontrolled Resource Consumption in Microsoft

CVE-2026-49160 与 CVE-2026-47291：HTTP.sys 相关漏洞的验证代码...

ctf-skills

Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more...

poc-lab

Recent CVE PoC & reproduction scripts. Focused on high-severity vulnerabilities across Linux kernel, Windows, macOS and more...

exploitarium

A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz. Please do not abuse these. I do this so to allure people into the field, and I've alway...

pikachu

Web漏洞练习靶场，包含SQL注入、XSS、文件上传等漏洞场景...

exploitarium

公开0DAY...

tomato-rc-qos-ppp-cve

Tomato by Shibby 1.28.0000 MIPSR2-124 K26 Mini - sbin/rc QoS + PPP Command Injection 3 CVEs, CWE-78...

AWSGateKeeper

AWS 安全审计网关 — GuardDuty 威胁响应、Inspector CVE 扫描、Detective 根因分析、IAM 角色自动化治理、通配符策略实时检测、事件驱动的事件响应与动态 IAM 隔离、SIEM 转发。可部署为 AWS Lambda 函数或端口 8000 上的独立 HTTP 服务器。...

exploitdb

漏洞库...

漏洞利用链自动构建程序

可自动提取CVE标准.json格式漏洞作为数据源自动生成漏洞利用链...

auto-test-platform

自动化测试平台-用于POC测试团队...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

海卫系列首款安全工具 电鳗（CVE-2026-31431 专项防护） 功能模块命名： ● 扫描检测：电鳗之眼（精准识别漏洞痕迹） ● 临时热修复：电鳗之盾（快速阻断攻击路径） ● 驻留防御：电鳗之网（持续监控系统状态） ● 修复建议：电鳗智库（提供专业修复方案与风险提示）...

claude-code-guide

No description...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

Copy-Fail-CVE-2026-31431-Linux-exp-tools-C-EXP CVE-2026-31431 Copy Fail Linux内核提权漏洞 - C语言版本地提权EXP 微信公众号：挽风安全...

LeakValue

No description...

sinatra

Classy web-development dressed in a DSL official / canonical repo...

PoC

No description...

ctf-skills

Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more...

LyInjector

一款功能强大的应用层反汇编代码注入器，实现了DLL注入，ShellCode注入等功能，是一款不错的后渗透利器。 A powerful application layer disassembly code injector that implements DLL injection, ShellCode injection, and other functions, is a good post penetration tool...

TrafficEye

该工具适用于 HW 蓝队对网络流量的深入分析，帮助安全研究人员、渗透测试人员及网络管理员等专业人士识别潜在的安全威胁，尤其是针对 Web 应用的攻击（如 SQL 注入、XSS、WebShell 等）。其模块化设计使用户能够根据实际需求自由选择并定制各类功能模块。 This tool is designed to help penetration testers and network administrators identify potential security threats, especially those targeting web applications such as...

claude-code-guide

No description...

PEASS-ng

PEASS - Privilege Escalation Awesome Scripts SUITE with colors...

pwntools

CTF framework and exploit development library...

青龙面板poc与exp

青龙面板认证绕过漏洞poc与exp...

commix

Automated All-in-One OS Command Injection Exploitation Tool...

Exploit for Code Injection in Apache Rocketmq

Apache RocketMQ NameServer 任意文件写入漏洞（CVE-2023-37582）漏洞复现POC，java版本 该poc为复现https://github.com/vulhub/vulhub/tree/master/rocketmq/CVE-2023-37582https://gitee.com/link?target=https%3A%2F%2Fgithub.com%...

Exploit for CVE-2024-23700

Mirror https://github.com/canyie/CVE-2024-23700...

claude-code-guide

No description...

V-APF

V-APF 是一款机器学习驱动的自动化 Web 安全检测框架。通过对 Web 页面在“基线请求 vs. 探测请求”间的语义指纹差异进行量化，结合随机森林 Random Forest模型，自动识别 SQLi / XSS 等漏洞并生成报告。...

sploitfun-linux-x86-exp-tut

SploitFun Linux x86 Exploit 开发系列教程...

漏洞扫描系统

This is a Python web application built using the Flask framework, designed to scan Windows systems for vulnerabilities. The application has several features, including user authentication, task management, and vulnerability scanning. Here is a summary of the key points: User Authentication The...

awesome-burp-extensions

This is a curated list of Burp Extensions, a collection of user-submitted plugins for the Burp Suite web application security testing tool. The repository is maintained under a CC0 1.0 Universal license, allowing for the permanent relinquishment of copyright and related rights to the works...

burp_mirror_gui

Burp Multiple Instance Management Tool This solution, when combined with jsforward or mitmdump, effectively addresses the following pain points in penetration testing: 1. Enables real-time testing for privilege escalation, unauthorized access, business logic vulnerabilities, and session-related...

metasploit-framework

This is the Metasploit Framework repository, a widely used penetration testing tool. It is an offensive tool for penetration testing and vulnerability assessment. The repository contains various modules and tools for exploiting vulnerabilities and conducting penetration testing. The primary...

metasploit-framework

This is the Metasploit Framework repository, a comprehensive collection of tools and resources for penetration testing and vulnerability assessment. The repository contains a wide range of modules, including exploits, payloads, and auxiliary tools, which can be used to test and exploit...

nuclei-templates

This repository is an offensive tool for vulnerability scanning and exploitation, specifically for the nuclei engine. It contains a community-curated list of templates for discovering security vulnerabilities in applications. The templates are used by the nuclei scanner to power the actual scanni...

autottp

This is a Python wrapper for the PowerShell Empire API, a framework for penetration testing and red teaming. The wrapper provides a simple interface to interact with the Empire API, allowing users to automate tasks and sequences of actions. The wrapper is feature complete as of Empire 1.5.0 and...

nuclei_poc

This repository is an offensive tool for Nuclei POCs. It is a Python script that clones GitHub repositories, extracts Nuclei POCs, and organizes them into categorized folders. The script runs automatically every day using GitHub Actions. The primary vulnerability class targeted by this tool is no...

Exploit for Use of Incorrectly-Resolved Name or Reference in Apache Tomcat

This is a Java class file that appears to be a payload for a malicious attack. The class is named "Foo" and has a single method, "", which is the constructor. The constructor takes no arguments and does not perform any actions. The class also has a "serialVersionUID" field, which is a unique...

Exploit for Use After Free in Redis

This is a PoC exploit for CVE-2025-49844, a high-risk vulnerability in Redis database. The exploit is a GUI-based tool called "CVE-2025-49844RediShell漏洞检查软件v2.0" that helps enterprises efficiently detect and fix vulnerabilities. The tool is an iteration of the original...

Exploit for Use After Free in Redis

PoC exploit for CVE-2025-49844, a high-risk vulnerability in Redis database, known as "RediShell", caused by a use-after-free flaw in the Lua interpreter. The vulnerability allows an unauthenticated attacker or an attacker with Redis access to trigger memory corruption by crafting a Lua script,...

ReconPi

This is a reconnaissance tool called ReconPi, designed for use on a Raspberry Pi or a VPS. The tool is written in Bash and uses various scripts to perform extensive reconnaissance on a target domain. The tool's primary function is to gather information about a target domain, including subdomains,...

sparta

This is a network infrastructure penetration testing tool called SPARTA. It is a Python GUI application that simplifies the scanning and enumeration phase of penetration testing by providing point-and-click access to various tools and displaying all tool output in a convenient way. The tool...

KitHack

This is a collection of tools and scripts for the KitHack framework, a penetration testing tool. The repository includes a Python script, clean.sh, which is used to clean up the tools directory. The script checks if the user has root permissions and, if so, removes any tools that are not empty. T...

discover

This is a collection of custom bash scripts used to automate various penetration testing tasks, including reconnaissance, scanning, enumeration, and malicious payload creation using Metasploit. The scripts are designed to be used with Kali Linux. The scripts are organized into several categories,...

gauntlt

This is an offensive tool for web application security testing. It is a ruggedization framework that enables security testing that is usable by devs, ops, and security. The tool is called Gauntlt. The target product/service or framework is not explicitly stated, but based on the examples provided...

evilgrade

Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates...

moment-timezone

This repository is an add-on for Moment.js, a JavaScript library for working with dates and times. It provides support for timezones, allowing users to easily work with dates and times in different timezones. The repository contains a variety of files, including a Gruntfile.js, which is used to...

nightmare

This repository is an introduction to binary exploitation and reverse engineering course based on CTF challenges, called "Nightmare". It contains a large amount of content, with over 90 challenges, laid out in a linear fashion, and well-documented write-ups explaining how to go from being handed...