#Network Security
200
2026-10-23
assetnote/php2shell-scanner
A
High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)
2026-08-29
mhtsec/nacos-authscope-poc
S
Nacos 3.x (3.0.0~3.2.3) auth scope misassignment: unauthenticated admin account creation & full takeover PoC, fixed in 3.2.4
2026-10-09
mhtsec/ARTEX
A
AI autonomous penetration testing system | Champion project of Baidu's "agent+" attack-defense challenge
2026-09-05
san3ncrypt3d/vulnometry
A
Measure what a vulnerability is worth to your business, not how severe it is in the abstract. Business Exposure Index scoring over NVD, EPSS, CISA KEV, OSV and GHSA.
2026-11-07
oz9un/sshole
A
openssh on musl accepted any 257+ char password for accounts with no password. since 2016. check.sh, poc, patch.
2026-10-21
Show HN: VoidAccess – open-source dark web OSINT, from query to a graph
A
Hi HN! Im Katriel, and im a Security Researcher/Enthusiast and in the wave of AI, i wanted to build that next gen of security tooling that surpasses the current tools, and even the paid industries with an open source engine. I built MailAccess as well, which is going to be the best damn email osint tool out there, in another year. But just before building MailAccess i built VoidAccess, because i was delving a lot into DarkINT and the content inside the dark web is too difficult to navigate through for a human, so i automated that pipeline, made sure the noise was removed, and anything NSFW was filtered out, to give the analyst an overview of what is present in the dark web, without having to actually go through it manually. Very simple to run, you just run a few commands to install, and a couple to investigate. Then the engine takes over, and stops onyl when the job is done(or at a particular time limit, if set by the user). Do check it out, if that is something that interests you. Thanks to the community for giving it the love it has got till now.
2026-08-30
Zulwatha/content-parity
A
Measure what a website serves to machine readers. Fetches any page as several honest identities, including a cryptographically signed agent, and reports what each one received.
2026-08-31
KorekKayu/IKONA-Security
A
🛡️ Comprehensive Cybersecurity Arsenal, Bug Bounty Payloads & Security Audit Tools by IKONA ONI
2026-10-07
Show HN: MailAccess – the true Email OSINT framework
A
Im a security engineer and i built mailaccess. When i started learning pentesting, i came across multiple lectures and notes of people listing out tools and websites, which gives the emails for a particular domain, and almost all of them mentioned that the tool might not stick, so its better to learn the methodology, rather than learning a tool- that stuck with me. As i was beginning to really get into pentesting i noticed a clear lack of email osint methodology through the tool itself - so i thought of building one myself. I researched email osint methodoliges and identity chaining in depth to really get this tool the exact brain that a human would use, the reasoning of each action and the scoring behind each of it. Then after learning i just put it all together, and people really liked ita nd supported it, because it gave the truth rather than just filling it with names, it doesnt give a list, it gives sections, where it came from and how. Thats exactly what i wouldve wanted when i was first learning, a tool that familiarizes with what each source gave, and what was found. Do check it out, i have made a hosted version so that people can route everything through that, and that also has been going very well, all thanks to the community and the solid supporters throughout. github.com/KatrielMoses/MailAccess
2026-10-19
Show HN: Ranet3 – High performance policy routed IPsec mesh SD-WAN
B
btw this is already running on all my machines (including a macbook), and i've configured all of them to have routable public ip addresses ;) especially for the mac, my ISP is SFR (over coaxial connection) with only dynamic ipv4, i can use this to get stable v4/v6 addresses very easily for all my devices behind the router ios/android app soon^{TM}
2026-09-19
CYBERVERSE-Research/skyline-speeder
A
Sender-side TCP acceleration: eBPF struct_ops congestion control with a Rust control plane. For links with non-congestive random loss. Kernel 6.12 LTS+.
2026-09-16
ustayready/Thunderstorm
A
A collector and derivation engine. It maps your environment, evaluates effective permissions and trust, and writes a complete attack graph as a single .rage.ndjson file. The input to everything else.
2026-10-23
aancw/php2shell-scanner
A
Scanner for PHP2Shell (CVE-2026-109618/109619): URL blackbox, local device and SSH.
2026-10-20
opentrap/opentrap
B
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
2026-10-09
ToiCF/CF-Workers-TGProxy
A
A Telegram Web/MTProto WebSocket proxy relay based on Cloudflare Workers, supporting bridge auth, bootstrap/session tokens, multi-lane WS multiplexing, AES-CTR encryption, custom frames, flow control and strict CSP.
2026-10-14
MrLouisWright/csp-forge
A
Scan a built static site (dist/, build/, out/) or live URL and generate a tight Content-Security-Policy with sha256 hashes for inline code. Outputs header, meta, Nginx, Apache, Netlify, Vercel, Helmet, JSON; --check mode for CI.
2026-11-05
MotherSphere/NIKKE-Launcher-Check
A
Read-only check for traces of the November 2026 NIKKE PC launcher compromise. Windows, Linux (Proton, Steam Deck) and macOS.
2026-11-03
yt1988/who-are-you
A
Who do websites think you are? A privacy self-check: every sniffer any site can run, the portrait they paint, and the contradictions that give away a VPN or proxy
2026-10-22
mikensec/php2shell-lab
A
Offline, reproducible lab to safely analyse an untrusted PoC for CVE-2026-109618/109619 and build detection rules. No exploit included; bring your own sample.
2026-10-04
mahdamin/esp-idf-injection-ng
A
Raw 802.11 frame injection on ESP-IDF v5+/v6+ via a one-command objcopy --weaken-symbol patch. Enables Authentication (SAE Commit), Deauth, Reassoc, Disassoc, and Control frames (RTS/CTS/ACK) through esp_wifi_80211_tx()
2026-09-06
Mujung/bitcoinfuzz
A
Differential Fuzzing of Bitcoin protocol implementations and libraries
2026-08-25
ADScanPro/Claude-AD
A
Active Directory pentest methodology for Claude Code: skills, agents and slash commands for internal AD red-team work (Kerberoasting, ADCS ESC1-17, DCSync, ACL abuse, NTLM relay, delegation), OPSEC telemetry and DORA/NIS2/ENS mapping. Drives netexec, impacket, certipy, bloodyAD, BloodHound CE.
2026-10-26
mountain-beaver/vps-forge
A
Agent Skill that lets Claude Code, Codex, Cursor, Copilot and other AI agents set up and harden a Debian/Ubuntu VPS without locking you out: SSH, firewall, fail2ban, updates, Docker, TLS, backups, phone alerts. Benchmarked on 120 VM runs.
2026-09-30
ESPARGOS/esp-sdr
B
ESP-SDR uses the undocumented raw I/Q capture functionality of ESP32 family chips to turn them into (low-duty-cycle) Software Defined Radios
2026-09-04
Tcotl/AgentCapture
A
Embedded honeypot and AI Agent countermeasure platform: 23 kinds of Agent fingerprinting + functional camouflage recruitment + conversational C2 + interactive SSH honeypot and session replay; in testing, all five mainstream Agents were countered and brought online.
2026-10-12
wg-ez/wg-ez
A
A modern WireGuard manager packaged into a single static Rust binary, using 1MB of RAM.
2026-09-27
agentscope-ai-java/deno-lockfile-diff
B
Turn a deno.lock diff into prioritised supply-chain signals — new raw-URL imports, integrity changes, registry moves.
2026-09-17
Show HN: Fail2zig. A single-binary fail2ban replacement written in Zig
B
Built fail2zig because I like fail2ban's log-to-ban model but wanted a smaller runtime with explicit limits on the work attacker controlled input can cause. fail2zig is a single static binary with bounded parsers instead of a regex engine, SQLite-backed durable state, and nftables enforcement directly through netlink. Also has the ability to inspect and migrate existing fail2ban configurations. I just release 0.4.0 today which is the point where I'm more comfortable putting it in front of more people. Source: https://github.com/ul0gic/fail2zig Wouldn't mind feedback from people running fail2ban today, including reasons you would not switch.
2026-09-14
oisee/sap-tui
A
sap-tui — a SAP DIAG terminal viewer: watch a SAP DIAG server's screens in your terminal, no SAP GUI required
2026-09-13
PG-Circuit/pg-circuit
A
Circuit breaker for production PostgreSQL. Native extension that can ALLOW, WARN, or BLOCK dangerous SQL based on live database state. Apache 2.0.
2026-09-07
dinosn/mikrotrick-poc
A
CVE-2026-67276 RouterOS SSH public-key authentication bypass lab PoC
2026-09-01
alotiho/osintPanel
B
Open-source OSINT panel for WHOIS, IP geolocation, email, and SSL certificate lookups — with a bundled desktop UI.
2026-08-23
batmanpriv/404DPI
A
404DPI is a Go local proxy built around adaptive TLS ClientHello fragmentation with strategy learning, plus SOCKS5, DNS-over-HTTPS, QUIC handling, TLS-fingerprint controls, domain fronting, per-domain profiles, and a local diagnostics/monitoring dashboard.
2026-10-21
ikow/php2shell-poc
B
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
2026-10-09
wireztna/wireztna-oss
B
Open Source, Self-hosted Zero Trust Network Access (ZTNA) built on WireGuard. Fine-grained per-user access to private resources — no domain required.
2026-09-16
jasonbitsmith/vps-first-steps
B
A single, readable bash script that takes a fresh Ubuntu/Debian VPS from default install to a hardened, ready-to-use server.
2026-09-15
haoliyang/PhishDrill
B
PhishDrill is an open-source phishing drill platform with zero third-party dependencies: no C2 to set up and no commercial platform to buy — a single intranet machine (even a laptop) is enough to run the complete phishing attack-and-defense test of "send email → plant tracking → deobfuscate → attribute to individuals → deliver reports", with a browser management console and a real-time situational awareness dashboard.
2026-09-08
ynsmroztas/KeySniper
B
**CVE-2026-18963** — unauthenticated Keycloak account takeover via the reset-credentials flow.
2026-08-23
ripmilla/netwalk
B
Read-only network survey toolkit for AI coding agents: crawl a site from one device, diagnose it, draw it, and hand over a report — without ever changing a device or seeing a credential.
2026-11-05
sudonoodle/BOF-coerce-ipp
B
Beacon Object File (BOF) to coerce machine account auth via IPP.
2026-10-12
JohnWatsoon/WatTunnel
B
Fast, encrypted TCP/UDP tunnel that keeps working when the network only lets ping through. ICMP, UDP, TCP, TLS, WebSocket, HTTP/2 and gRPC carriers in one process.
2026-10-09
Abhishek-Gali/HookRelay
B
Security-hardened webhook ingestion & multi-destination delivery gateway (GitHub ➔ Discord, Slack, HTTP) with HMAC-SHA256 verification, durable SQL queueing, fencing leases, smart retries, and DLQ.
2026-09-13
crypt0p3g/adexview
B
Browse, search and audit AD Explorer snapshots offline in your browser: decoded attributes, LDAP filters, and reports for what BloodHound doesn't show (DNS, subnets, DFS, GPO links, LAPS, AD CS).
2026-10-23
miilv/ya-station-root-shell
B
Full chain reproduction: eMudhra CA → MITM of Yandex Station Mini 2 config sync → root adbd → root shell. PoC scripts + disclosure report.
2026-10-19
interplains/zero-breach
B
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
2026-10-14
MrLouisWright/header-sentinel
B
CI-friendly CLI and API that fails builds when deployed URLs are missing or misconfigure HTTP security headers (HSTS, CSP, COOP, cookies...) with specific fixes. JSON & SARIF output.
2026-10-01
0xPrimo/ExecuteAssemblyPICO
B
A Position Independent Code (PIC) implementation of the execute-assembly command, using Crysta Palace linker.
2026-09-29
kofiadeyemiq/byterange
B
RFC 9110 HTTP Range parsing and serving for Go, with limits on range count and multipart amplification.
2026-09-13
v-pun215/Tourmaline
B
Reverse engineering notes, IOCs, and deobfuscated source for a ClickFix Python RAT that calls itself Tourmaline.
2026-09-07
biusberline/cloudflare-turnstile-solver
B
A small Python library and CLI for working with Cloudflare Turnstile on your own pages - read the sitekey, build the token, verify the result.
2026-10-05
hashcott/ghostline
B
One-click encrypted DNS (DoH/DoT/DoQ/DNSCrypt), DPI bypass with zapret2 or GoodbyeDPI, a local HTTP/SOCKS proxy with TLS fragmentation, and domain rules for Windows. ~30 MB RAM in the tray, no telemetry, always restores your original DNS. For research and educational use.
2026-09-13
grah4na/prism
B
Differential fuzzer that finds HTTP parser discrepancies across 54 servers to uncover request-smuggling primitives.
2026-09-10
lynchest/runnel
B
A small, secure HTTP egress gateway with per-domain rate limiting, circuit breaking, queueing, caching, and SSRF protection.
2026-11-04
ef1m03/kordon
B
Kill switch for apps: freezes Claude, ChatGPT, Cursor, Telegram and other programs when the network or IP changes
2026-10-16
zgsfsec/Full-Chain-Sentinel-System
B
[Full-Chain Sentinel] Full-process penetration testing Agent system, a penetration testing assistant tool for security services; illegal attacks are prohibited.
2026-09-22
iterat0r/CnaEmulator
B
CnaEmulator is a standalone, general-purpose development, emulation, and testing harness for Cobalt Strike Aggressor Scripts (.cna)
2026-09-16
romanrublev/turnrelay
B
Tunnel UDP through WebRTC TURN relays (VK Calls and others), disguised as call media, routed by sing-box
2026-09-04
porutchik/tspu-check
B
Detection of IP address and subnet blocking on TSPU (DPI) using the cheburcheck/probe method — SYN tracing with limited TTL. A single Perl script with no dependencies.
2026-10-27
OpsecGuy/Nuclei-Remote
B
Chrome extension for running Nuclei scans on your own server, with API key authentication, configurable rate limits, live logs, scan history, and downloadable results.
2026-11-09
symansun/doops
B
No SSH needed to operate and maintain any machine | DoOps: an auditable remote operations entry point with a public gateway + intranet agent
2026-10-26
assetnote/node2shell-scanner
B
High fidelity detection mechanism for node2shell (CVE-2026-111497)
2026-10-22
JoasASantos/php2shell-scanner
B
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
2026-10-12
7h30th3r0n3/Flipper-EvilRelay
B
ISO-DEP (ISO 14443-4) NFC relay for the Flipper Zero. Read a real contactless card on a phone/Evil-Cardputer, relay APDUs over Wi-Fi to an ESP32-C3 bridge, and emulate the card to the reader with the Flipper. Ported from Evil-M5Project.
2026-10-11
masaleem-oss/Fengard
B
Kernel-enforced firewall and DNS filtering for any OpenWrt router. Parental controls, ad blocking and screen time. A Pi-hole alternative.
2026-09-19
crypt0p3g/adnullenum
B
One-pass anonymous Active Directory enumeration over SAMR and LSARPC — null session, no credentials, with structured reusable output.
2026-09-18
armourinfosec/surfacemap
B
Maps one authorized web origin's attack surface: hosts, technologies, routes, parameters, identities and trust boundaries, delivered as an evidenced, ranked hand-over document before a single payload is sent. Client-side JavaScript analysis is the engine underneath. For authorized security testing only.
2026-09-17
mlcsec/ResetSpy
B
Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal
2026-09-13
glizzykingdreko/datadome-plv3-vm-disassembler
B
Disassembler for DataDome's plv3 virtual machine, the one that produces the plv3 token on the interstitial and the captcha. It recovers the opcode table, the primitive table, the value tags and the string table straight out of the bundle you feed it, then prints a readable listing. No hardcoded offsets, no per-rotation patching.
2026-09-13
m0m0x01d/strata
B
See why a web vulnerability works, not just how to trigger it — a single-file, zero-dependency security lab that renders a vulnerable app as a 7-layer cross-section. 17 labs, attacker & defender modes, AI-authorable.
2026-09-08
Show HN: Stuxnet – A reconstructed source code of the infamous cyber-weapon
C
Stuxnet! Here reproduced by me. Only researchs educations purposes.
2026-10-06
Blackfrost-AI/Cyber-Frost-Harness
C
Native red, blue, and purple security-agent harness for CYBER-FROST
2026-10-04
kobasky17/SecurityToolkit
B
Triage de seguridad para Windows (procesos, red, tareas programadas, persistencia, Windows Defender) con veredicto en lenguaje simple. 100% portable, open-source friendly, creada por @kobasky para su comunidad.
2026-09-16
Technicalflight/AiGuard
B
AiGuard — a local-first AI traffic security gateway: a local MITM proxy intercepts only AI domains, redacts data on the request side, streams and restores responses, and detects seven categories of risk signals. Original content is never written to disk or uploaded. (Note: if you need the model to operate directly with tokens or other keys, add them to the whitelist or disable this feature!!!!)
2026-10-22
0xrsydn/php2shell-scan
B
Reachability + change detector for the php2shell PHP RCEs (CVE-2026-109618 / CVE-2026-109619). Agent-ready, stdlib only, read-only by default.
2026-10-21
kernelstub/Pwnbox
B
Privacy focused NixOS pentesting environment with a customizable desktop and security tools.
2026-10-01
yeet-src/agentcap
B
eBPF Prometheus exporter for AI-agent activity — per-agent tools, domains, ports, files, CPU & network — with a Grafana dashboard. A yeet service.
2026-09-06
Drotfix/ghunt-panel
B
A local, self-hosted web UI for GHunt — mxrch's OSINT framework for investigating Google accounts. ghunt-panel wraps the ghunt CLI in a small Flask app so you can run lookups, read the results, and manage your login session from a browser tab instead of a terminal.
2026-09-06
disrex-group/stylesmuggler-mitigation
B
Emergency mitigation for StyleSmuggler, the unpatched Magento/Adobe Commerce RCE (Sansec, 2026-09-05). Web-server rules + CLI guard + compromise scanner.
2026-09-06
nexovir/Forbidra
B
A bug bounty tool for bypassing 401/403 access restrictions and testing endpoint accessibility.
2026-10-08
tangrow1105/dns-otg
B
Unofficial Android app to manage your Control D DNS on the go: profiles, filters, services, rules, endpoints, statistics and the live activity log.
2026-09-28
pho5nix/Red-Team-GOAD-Lab-Proxmox
B
Build guide for Red Teaming home lab. GOAD lab setup in Proxmox and pfSense, Operator/C2 and Redirectors.
2026-09-17
DevCop95/dev101x-pentest-lab
B
Self-contained Docker Pro Lab for pentest practice: boolean blind SQLi + hashcat cracking, web path traversal, command injection, internal network pivoting and SUID PATH-hijack privesc — with live flag validation and completion certificate. No VPN needed.
2026-08-29
CSPF-Founder/red-clippy
B
open-source pentest management built to be operated by an AI agent
2026-08-29
harenaNow/SNI-TLS-test
B
Reality protocol domain selection script, used to filter high-quality SNI domains for the Reality protocol
2026-10-29
ysuito/RabbitWall
B
RabbitWall is a web console for a Linux gateway that lets you observe traffic from an AI network and switch its Internet access on or off.
2026-10-22
0x4148/CVE-2026-109618-php2shell-lab
B
PHP2Shell (CVE-2026-109618 / CVE-2026-109619) Docker lab and PoC. Use-After-Free in PHP's session.upload_progress.
2026-10-21
eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC
C
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
2026-10-21
syhunt/php2shell-protection
B
Emergency Apache mitigation and testing toolkit for php2shell (CVE-2026-109618 / CVE-2026-109619), featuring multipart POST blocking, request-size limits, and additional hardening measures.
2026-10-03
cn0xroot/ArgusBPF
B
eBPF-based system & AI-agent activity monitor with a bilingual professional/plain-language web dashboard
2026-09-14
ccqwertyui/luci-app-opengfw
B
OpenWrt & iStoreOS openGFW visual control panel, supporting deep feature identification and blocking of Shadowsocks/VMess/Trojan
2026-10-17
kamalx06/TornadoC2
B
Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go binary agent with every property baked in at build time. Multi-operator team server with RBAC, audit chain, and a Qt/CLI console. Linux + Windows, amd64 + arm64.
2026-10-04
Hellz0wnzJ00/hellzgate-espnow-cluster
B
HellzGate ESP-NOW Cluster Firmware — Open-Source Beta. Master + scanner/node firmware for ESP32-C5. Fork, build and test. Not a final or production release.
2026-10-01
pkhabazi/SentinelToXDR
B
Assess, convert and deploy Microsoft Sentinel analytics rules as Defender XDR custom detections
2026-09-18
bl4ckarch/go-responder
C
Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
2026-08-24
vantamothlabs-oss/WPA4
B
This is an **experimental, non-interoperable** open-source implementation of the WPA4 MegaPlan. It is NOT a certified standard, NOT ready for production networks, and NOT interoperable with real WPA3/WPA4 devices.
2026-09-28
PanosoikoGr/adaptix-kerbrute
B
In-process Kerberos user enumeration and password attacks for AdaptixC2 — no process spawn, no file drop.
2026-09-27
Mister-iks/pcybox-attackgraph
B
Open source browser lab to build a simulated infrastructure, watch an attack move through it, and check whether your defense works.
2026-09-25
petermalone/CVE-2026-84543
B
Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability
2026-09-16
shaheeryasirofficial/SmuggleMyPayload
B
SmuggleMyPayload generates HTML pages that embed and reconstruct files client-side using JavaScript. The toolkit offers multiple HTML Smuggling techniques, payload encoding options, JavaScript variations, and pre-built HTML templates.
2026-09-14
shaikarifali/bundlebleed
B
AI/LLM-assisted JS Recon and vulnerability triage for authorized bug bounty testing & pentesting — scope-gated, passive-by-default, human-verified
2026-09-10
g0h4n/PassTheCert-rs
B
Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀
2026-10-23
agentshield-dev/agentshield
B
Agentshield is open source defense for Kubernetes and AWS. It learns how your workloads really talk, flags lateral movement with evidence, and proposes fixes you approve.
2026-10-22
wakemeiflose/php2shell
B
CVE-2026-109618 / CVE-2026-109619 — PHP session.upload_progress RCE PoC & Vulnerable Lab
2026-10-15
abraxas/pfsense-qinq-parent-if
B
pfSense CE 2.9.0-DEVELOPMENT - High - Remote - RCE - QinQ parent-if ifconfig
2026-09-25
dinosn/cve-2026-87902-wordpress-lfi-lab
B
Reproduction lab + URL-list scanner + PoC for CVE-2026-87902 / GHSA-7hp8-65ch-5whp — WordPress get_page_template() unauthenticated LFI to conditional RCE (WP 4.7.0-7.1.1, fixed 7.1.2). Authorized/defensive testing.
2026-08-31
Oihalitz/xdp-dns-evadeproxy
C
Proxy DNS en Rust para evitar bloqueos de operadores mediante reescritura transparente de IPs anycast.
2026-10-25
titaniumjones/unifi-iot-isolation-guide
C
A practical guide to isolating smart TVs and IoT devices using UniFi VLANs, zone-based firewalls, DNS filtering, and IPv4/IPv6 verification.
2026-10-24
BRANDEFENSE/threat-actor-dataset
C
Open threat actor dataset: APT groups, ransomware groups, malware and MITRE ATT&CK techniques with aliases, TTPs and sources. JSON, CSV, STIX 2.1.
2026-10-07
priyankub/crowdsec_grafana_dash
C
Grafana dashboard for CrowdSec: attack map, scenarios, top IPs/paths, agents, bouncers and a live detection-to-enforcement flow. Reads the CrowdSec MySQL/MariaDB database directly.
2026-09-27
DeathShotXD/Comment2Shell
C
Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker
2026-09-24
ressl/cve-2026-87902-poc
C
PoC for CVE-2026-87902 — unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with a pinned vulnerable lab
2026-09-09
Show HN: VolAnti – Open-source acoustic detector for fibre-optic FPV drones
C
This project has been a month in the making, and 9 fully functional units will be sent tomorrow to an undisclosed civilian site across the Israel - Lebanon border. All of my findings are shared online to anyone on the globe who could benefit from them, or make their own units. I'm an engineering student at the University of York, originally from Israel, studying in England. I too often have been hearing about tragic cases involving civilians in war zones being chased and attacked by small FPV drones mounted with an explosive. Especially around the north of Israel, Ukraine and Russian. My intentions for this project were clear: create a device small, portable and cheap enough for civilian use, that could drastically change the outcome of a drone infiltration through early alerting. I decided to dedicate a month of my summer to go back to the university labs and to work on this as personal project. These drone attacks are not run on normal wireless drones, instead they are run on small FPV drones that are connected to the operator through a long spool of fibre optic cable. This simply means that drone detection through Radio, the current industry standard, is not applicable. My solution was to build an acoustic detector. A device that uses 4 MEMS microphones to capture the drone's propellers' emitted noise as they cut through the air, runs that data through several algorithms to enhance the SNR, reduce noise (directional, possible confusers), recognises their comb looking shape when plotted by frequency, and alert the user through multiple outputs (display, beeper, buzzer, led) along with alerting all nearby units using a LoRa module also fitted in the device. The units have been tested against a custom drone rig, housing the exact same specs as the drones used in the Israel-Lebanon border (four 2807 motors, 7 in tri blades, FPV airframe), which was stationed 104.2m away from the device in a street with passer-by's and mild wind. That test ran successfully and the device was able to detect the drone. This device was built for detection and alerting only, so no jamming. Every online resource i could think of in regarding this project exists in the Github, along with a neat website that shows off more media with explanations, also housing a live detector simulation that runs in the browser: https://volantitech.com/#simulator
2026-09-16
Ethan-Andrews/ThreatIntel-Aggregator
C
Self-hosted threat intelligence platform — feed aggregation, AI triage, MITRE ATT&CK coverage, and Sentinel-integrated detection engineering. Runs standalone or fully Azure-integrated.
2026-10-23
3em0/php2shell
C
Remote HTTP-only RCE on PHP 8.4.26 + Apache prefork/mod_php (ASLR bypass via session.upload_progress UAF) — self-contained Docker lab, one-click exploit.py
2026-10-23
JoasASantos/php2shell-exploit
C
PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE
2026-10-23
devploit/php2shell
C
PHP2Shell: version-aware research toolkit for CVE-2026-109618 / CVE-2026-109619 — pre-auth RCE in PHP session.upload_progress (mod_php). Build profiles, labs, heap calibration and detection guidance for authorized security testing.
2026-10-03
emmanuelygr/mini-siem-log-analyzer
C
Miniature SIEM tool for parsing Linux security logs and identifying suspicious authentication activities.
2026-09-10
weidutech/PentestPi
C
Autonomous Penetration Testing Agent Framework with External State Memory & Anti-False-Falsification Guardrails.
2026-08-31
MSNightmare/PrettyPrague
C
GenDigital Avast Antivirus ZeroDay Elevation of Privileges Vulnerability
2026-10-26
hevnsnt/CVEngine
C
AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
2026-10-14
bookSiYi1412/ARTEX
C
AI autonomous penetration testing system | Baidu "agent+" offense-defense challenge champion project
2026-10-04
MatinSenPai/Gemini-Config-Checker
C
Chain region scanner: find proxy configs that get you into Google AI Studio and Gemini (signed-in browser check, anti-DPI, Windows/macOS/Linux/Android)
2026-08-24
MNSH-Nexo/telegram-webproxy-installer
C
One-click multi-instance Telegram web proxy installer (MTProxy + Caddy) for Debian/Ubuntu servers.
2026-10-29
vaishantsah/watson-AI-osint-all-in-one
C
Watson — free OSINT tool for Windows: people search across 3,100+ public sites by nickname, email, phone or website. Open-source intelligence made simple: digital footprint check, username lookup, social media search. No account, no tracking. Site: watsonfind.icu
2026-10-23
Qbix/proxy
C
Simple web server proxy to protect PHP code bases from known vulnerabilities.
2026-10-07
Hamidooh/securify
C
High-speed web security auditor & DevSecOps dashboard for SSL, HTTP headers, DNS defenses, and port exposure.
2026-10-04
argcyberskillhub/OSINT-X
C
OSINT-X is a terminal-based Open Source Intelligence and reconnaissance tool.
2026-10-02
ADScanPro/ad-audit-wordlist
C
The Kerberoasting / AD password-audit wordlist I use on engagements: priority-merged HashMob large list + The-Viper-One's kerberoast_pws, order-preserving dedup via rling, paired with OneRuleToRuleThemStill for hashcat. MIT, rebuild-it-yourself recipe.
2026-09-13
SyntaxMethod/CVE-2026-41089-Netlogon-RCE-PoC
C
CVE-2026-41089 Netlogon RCE PoC — security research, vulnerability validation & defensive testing.
2026-09-07
Nicholas2519/python-cloudflare-turnstile
C
A small Python library and CLI for working with Cloudflare Turnstile on your own pages - read the sitekey, build the token, verify the result.
2026-10-29
speedyfriend433/CVE-2026-84636-PoC
C
Proof of concept of CVE-2026-84636, WiFi SSID Info Disclosure
2026-09-17
imranshaikh116/Practical-Network-Security-Lab
C
Practical network security lab — 13 modules covering recon, MITM, DNS attacks, DHCP, router exploitation, cryptography, and defense. Isolated VM lab. Attack → Detect → Fix.
2026-09-14
STEALTHNET-APP/STEALTHNET-SOFTWARE
C
Self-hosted VPN service platform · Rust · PostgreSQL · Control panel, customer website and Telegram Mini App · RU/EN
2026-09-14
l0gfr/BLACKPROOF-AGPL
C
BLACKPROOF: local-only cyber evidence preparation and verification, licensed under AGPL-3.0-only.
2026-09-12
CodeByPinar/riskops
C
BT ve siber güvenlik risk yönetimi platformu — risk envanteri, 5×5 değerlendirme, aksiyon takibi ve kurumsal raporlama. PHP 8.3 + MariaDB, framework ve CDN kullanmadan.
2026-08-23
cybercloudskills/cyber-cloud-skills
C
Open-source cloud security and AI penetration-testing skills for CyberStrikeAI and Strix, covering AWS, Azure, GCP, OCI, Kubernetes, Docker, IAM/RBAC, attack-path analysis, container security, and posture assessment.
2026-10-16
Haryy985/yunkun-console-preview
D
Yunkun automated penetration console: feature overview, usage flow, additions and improvements, UI previews. This repository currently contains only articles and screenshots, no product source code.
2026-10-12
wlmosv-png/wpaforge
C
Android WPA passphrase cracker — target-derived candidates, smart ranking, resumable runs, background queue. Apache-2.0.
2026-09-19
0xBugatti/wolf
C
Curated wordlist and payload collection for penetration testing, bug bounty, and red-team work — 2,500+ lists across credentials, content discovery, DNS, injection payloads, HTTP fuzzing, dorks, and AI/LLM testing.
2026-09-16
jinpy666/dbx-plugin-ssh
C
DBX SSH & SFTP plugin: secure terminal, SFTP, MCP automation, and guarded server operations.
2026-09-13
guneykabel/cve-2026-85706
C
Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions: 18.7–19.1.7; 19.2.0–19.2.5; 19.3.0–19.3.1
2026-10-12
CuteEthanLeo/MistSail
D
MistSail 雾帆: a local fork based on Sheas Cealer 1.1.4. Takes over TLS handshakes on the local machine with one click (nginx rewrites SNI / loopback relay fragments ClientHello), no proxy server. For defending against illegal network surveillance and network security research only.
2026-09-24
686f6c61/DIGI-F8748
C
Recuperador de la contraseña de administrador para routers DIGI ZTE F8748 — sin instalar nada, solo lectura, paso a paso. macOS · Linux · Windows
2026-10-22
KarimUD7/RCE-POCKET-POC-for-PHP2SHELL
C
Pocket proof-of-concept and lab materials for PHP2SHELL remote code execution research.
2026-09-29
murrez/CVE-2026-88772
C
CVE-2026-88772 PoC: Citrix NetScaler ADC/Gateway DTLS memory overflow (RCE/DoS, CVSS 9.5). Fingerprints Gateway, build vs 14.1-73.37 / 13.1-64.23, UDP/443 DTLS probe. CTX697096; active exploitation reported. https://pocbit.org/pocs/cve-2026-88772
2026-09-27
AlbertoPrado210/expoCiber-tools
D
Herramientas defensivas en Python para VirusTotal, AbuseIPDB y Have I Been Pwned
2026-09-23
kaandemir993/PureRAT-msbuild.exe--C2-Extraction--Net-Evasion-Analysis
C
Reverse engineering analysis of PureRAT, a multi-stage RAT that executes via msbuild.exe and communicates with C2 servers at pure8s.ddnsfree.com and 52.241.248.38. Uses .NET evasion techniques (DisableNativeImageLoad), file system manipulation (DeleteFile, WriteFile, ReadFile), and startup VBScript persistence.
2026-09-09
Solvr-io/solvr-go
C
The official Go client for the Solvr API: typed, dependency-free access to the Kasada and DataDome endpoints, with sync examples, retries, and a small concurrency-safe core.
2026-08-27
HackingLZ/sleepwalker
C
Passive backdoor implant that sniffs for a covert magic-packet trigger and runs tasks written in a custom 23-opcode bytecode command language.
2026-11-09
pendakwahteknologi/security-threat-agent
C
A guide for building an AI agent that alerts you to new vulnerabilities, active exploitation and malicious packages. Includes Malaysian sources.
2026-09-25
arif-offsec/funkmykali
C
Full Kali Linux tool installer for HTB CPTS, OffSec OSCP, TCM Security PNPT/PJPT, INE eJPT/eCPPT, and TryHackMe PT1/PT2. Covers all 28 HTB Academy Penetration Tester Path modules. System-wide, zero-error, community-sourced — 100+ pentesting tools from a single command.
2026-09-15
TW4RDYDEV/NEXUS
C
Local-first offensive security engagement platform for mapping assets, credentials, sessions, pivots, findings, evidence, and attack paths.
2026-08-28
bayshier/awesome-osint-arsenal-zh
C
awesome-osint-arsenal Chinese edition: 753 OSINT and security tools, 50 categories, one-click install script (translated from rawfilejson/awesome-osint-arsenal, MIT)
2026-10-31
N1nEmAn/sapper-v2
C
Autonomous pentest legion — AI commander + worker swarm + layered fact-intent graph. 3rd Tencent Intelligent Attack-Defense online champion (634 teams · 8h unattended · 1B tokens beat 4.5B). The Nüwa Test: give AIs Create/Language/History, let a civilization grow.
2026-10-21
Zer061/CVE-2026-109618
C
PoC CVE-2026-109618 / -109619 (PHP session.upload_progress heap UAF)
2026-09-11
VoidSecSoftwares/voidsyscall
C
Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.
2026-10-05
FireflyRetort/zapret-discord-youtube
D
NEW FIX How to bypass the Discord block in Russia?! New Discord-YouTube bypass for PC! Discord ban & DS fix!
2026-11-06
AtomIllusionistDwell/watson-username-footprint-finder
C
Free people-search desktop app: look up a nickname, email, phone or site across 3,100+ public pages and get one readable report.
2026-10-23
Xiao1an/ARTEX-God
C
ARTEX second-development enhanced version - optimized interception of sensitive operations, added one-click getshell, long-chain post-exploitation, internal network lateral movement, enhanced logic vulnerabilities, satellite and other IoT protocol testing support, etc...
2026-09-29
predyy/CVE-2026-28695
C
CVE-2026-28695 PoC - Authenticated blind remote code execution in Craft CMS.
2026-09-12
ZeroDayEvil/ai-security-tool
C
🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomous AI agents (DeepSeek, OpenAI) for automated security workflows, CTF & DevSecOps. Cross-platform & Web UI.
2026-10-22
xuehuolll/php2shell-CVE-2026-109618-109619
C
CVE-2026-109618/109619 — PHP session.upload_progress pre-auth RCE. Exploit research: remote ASLR chain, PoC & patch analysis.
2026-10-14
Handcuffgladominate/zapret-discord
C
NEW FIX 1.10.3 Как Обойти Блокировку Дискорда В России ?! Новый Дискорд Обход Для ПК ! Запрет Дискорд & Фикс ДС !
2026-10-14
wavepostmansteal/discord-zapret
C
NEW FIX 1.10.3 How to Bypass the Discord Block in Russia?! New Discord Bypass for PC! Discord Ban & DS Fix!
2026-08-31
Ordersec/ordereye
C
High-performance C-based network reconnaissance and asset enumeration tool.
2026-08-27
AS-FOSS/aegis-skills
C
A Collection of Defensive Cyber Security skills designed to harden your Software, Infrastructure and even Game.
2026-10-25
aarsaputra/php2shell
C
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design