skills
specterops/skillsReusable offensive security skills and plugins for AI agents, covering reconnaissance, exploitation, C2, payload development, and reporting across…
command-and-controleducationexploitation+9
671
specterops/skillsReusable offensive security skills and plugins for AI agents, covering reconnaissance, exploitation, C2, payload development, and reporting across…
fkasler/cuddlephishWeaponized Browser-in-the-Middle (BitM) for Penetration Testers
28zaaky/khaos-c2KHAOS is a modern C2 framework that routes agent traffic through cloud services already trusted by enterprise networks.
princessauroraj/chinese-cybercrime-researchResources to learn more about Chinese-language cybercrime actors.
roxanne_ardary/emailxposeEmailXpose is an open source AI-powered email security system that detects phishing, spam, scams, malware, and social engineering attacks. It goes…
drk1wi/modlishkaModlishka. Reverse Proxy.
henriksb/extensionspooferSpoof file icons and extensions in Windows
toxy4ny/bl00dym4ryEducational trojan simulator for cybersecurity training, simulating phishing attacks with social engineering, system reconnaissance, anti-sandbox…
enaqx/awesome-pentestA collection of awesome penetration testing resources and tools
wifiphisher/wifiphisherRogue Access Point framework for red team engagements and Wi-Fi security testing. Performs Evil Twin, KARMA, and Known Beacons attacks to achieve…
andromeda1957/netpwnTool made to automate tasks of pentesting.
cmadhushanka/wordpress-rce-vapt-cve-2020-25213Educational cybersecurity project demonstrating exploitation and mitigation of CVE-2020-25213 (WordPress File Manager Plugin RCE). Includes malware…
quinnbast/malicious-mcpA Proof-of-concept repository showing how an untrusted MCP server can steal literally everything...
s0ld13rr/claude-code-backdoorBackdooring Claude Code via hooks in settings.json. Authorized use only!
h4lpy/toastfix-demoProof-of-concept security demo illustrating how PowerShell can create trusted-looking Windows toast notifications chained together with…
shndnth/cve-2022-30190Educational Proof-of-Concept for the CVE-2022-30190 (Follina) vulnerability.
sobri3195/-pegasus-suiteA comprehensive security toolkit with 1000+ penetration testing and security assessment tools.
aniket2912/all-cehv13-module-wise-pdf-reportsPractical labs, notes, and reports for CEH v13 modules — covering web hacking, network pentesting, malware analysis, social engineering, and security…