Skip to content
View btaub's full-sized avatar
👋
👋

Block or report btaub

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don't include any personal information such as legal names or email addresses. Markdown supported. This note will be visible to only you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Showing results

A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers.

JavaScript 35 9 Updated Dec 18, 2025

🍯 T-Pot - The All In One Multi Honeypot Platform 🐝

C 8,562 1,312 Updated Dec 18, 2025

Stand up a simple Elastic container with Kibana, Fleet, and the Detection Engine

Shell 512 91 Updated Dec 11, 2025

A vulnerability scanner for container images and filesystems

Go 11,248 720 Updated Dec 23, 2025

Force Remove Copilot, Recall and More in Windows 11

PowerShell 5,773 183 Updated Dec 23, 2025

A phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak sensitive device-activity patterns. (WhatsApp /…

TypeScript 1,429 263 Updated Dec 19, 2025

A collection of my Semgrep rules to facilitate vulnerability research.

C 762 76 Updated Dec 14, 2025

A Python port of the JJDecoder function written by Syed Zainudeen

Python 19 15 Updated Jan 28, 2014

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

Go 4,744 507 Updated Dec 16, 2025

A Go-based Exploit Framework

Go 398 42 Updated Dec 22, 2025

RTSP Stream to WebBrowser

JavaScript 1,635 373 Updated Dec 20, 2025

A collection of companies that disclose adversary TTPs after they have been breached

291 20 Updated Nov 11, 2025

A Burp Suite extension for analyzing Next.js Server Actions - server-side functions identified by hash IDs and `Next-Action` headers.

Python 39 7 Updated Aug 8, 2025

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

PHP 3,689 538 Updated Sep 29, 2025

Find secrets with Gitleaks 🔑

Go 24,350 1,864 Updated Dec 9, 2025

A tool for discovering gRPC services and methods without needing protobuf files.

Go 21 1 Updated Jun 12, 2025

AI agent for autonomous cyber operations

TypeScript 450 106 Updated Nov 29, 2025

An open-source, self-hostable PaaS alternative to Vercel, Heroku & Netlify that lets you easily deploy static sites, databases, full-stack applications and 280+ one-click services on your own servers.

PHP 48,714 3,324 Updated Dec 23, 2025

PoC and notes about TOCTOU (race condition) vulnerability in C language and tested on GNU/Linux (Ubuntu 16.04).

C 10 Updated Sep 14, 2023

Suggests programs to run against services found during the enumeration phase of a Pentest

Shell 113 24 Updated Oct 25, 2025

A hands-on Capture The Flag (CTF) environment designed to practice prompt injection techniques against a Large Language Model (LLM).

HTML 3 1 Updated Apr 2, 2025

Docker Challenge creation for CTFd. Allows per team/user containers!

Python 107 68 Updated May 8, 2025

Rust tool to detect cell site simulators on an orbic mobile hotspot

Rust 3,736 278 Updated Dec 16, 2025

📷 Glitchify images and GIF - with highly customizable options!

Python 1,789 63 Updated Jun 6, 2024

Winners of the International Obfuscated C Code Contest

HTML 1,073 74 Updated Dec 15, 2025

envs.sh - null pointer

Python 43 9 Updated Jan 13, 2024

Awesome EDR Bypass Resources For Ethical Hacking

1,420 140 Updated Oct 16, 2025

A repository with 3 tools for pwn'ing websites with .git repositories available

Shell 4,111 636 Updated Jun 14, 2023

A free, self-hostable news aggregator…

PHP 13,405 1,072 Updated Dec 23, 2025
Next