Proof of concept for vulnerability from https://blog.ammaraskar.com/github-token-stealing
☆20Jun 1, 2026Updated 4 months ago
Alternatives and similar repositories for github-dev-token-steal-poc
Users that are interested in github-dev-token-steal-poc are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A chromium extension exploitation toolkit☆28Oct 2, 2025Updated last year
- MCP server for automated binary diffing.☆20Jul 15, 2026Updated 2 months ago
- Match & Replace rules for Portswigger's Burp that operate globally across all utilities.☆24Jan 26, 2026Updated 8 months ago
- ☆35Jul 14, 2026Updated 2 months ago
- Inboxfuscation is an advanced offensive & defensive framework for mailbox rule obfuscation and detection in Exchange environments.☆84Sep 11, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- This repository contains Loadable Kernel Modules (LKM) and LD_PRELOAD-based modules designed for penetration testing, red teaming, and se…☆13Feb 15, 2025Updated last year
- Exactly what it sounds like, which is something rad☆22Oct 12, 2022Updated 3 years ago
- An API hooking framework for intercepting and monitoring Windows applications☆20Jun 17, 2026Updated 3 months ago
- Indicators of Normality☆11Jul 22, 2022Updated 4 years ago
- Exploit for CVE-2025-39946, a bug in the Linux kernel's net/tls subsystem.☆36Oct 5, 2025Updated 11 months ago
- Example of Fly.io machines orchestration with Terraform and DNSimple☆16Mar 5, 2023Updated 3 years ago
- Fully automated Python script that creates a PNG image from predefined chunks, encodes it to Base64, and saves both the PNG file and the …☆15Feb 13, 2026Updated 7 months ago
- Path traversal exploit for XWorm C2 servers (Up until v6.5). Arbitrary file write via unsanitized HWID in Recovery message handler.☆18Jan 22, 2026Updated 8 months ago
- A ring0 Loadable Kernel Module (Linux) to log all commnds run on the system.☆18Jul 13, 2026Updated 2 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A collection of curated YARA rules used as part of the Filescan.io service☆21Sep 27, 2026Updated last week
- Active Directory time discovery protocols for red teams. Stealthy extraction via Kerberos, SMB, NTLM, and CLDAP.☆78Sep 6, 2026Updated 3 weeks ago
- Public rules and samples for various automations through LimaCharlie.io☆14Aug 2, 2026Updated 2 months ago
- FOFA Hacking Queries - API Key Hunter☆49Mar 29, 2026Updated 6 months ago
- My Notes on Regular Expressions for AWAE/OSWE.☆39Sep 5, 2023Updated 3 years ago
- Process doppelganging POC using direct system calls, PPID spoofing and dropbox as an external delivery channel for the payload.☆18Jan 7, 2021Updated 5 years ago
- Detection engineering template☆15Jul 24, 2025Updated last year
- ☆15May 30, 2026Updated 4 months ago
- ☆22May 3, 2026Updated 5 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Show icons for running programs in the niri window manager☆15Nov 7, 2025Updated 10 months ago
- EvilMist is a collection of scripts and utilities designed to support cloud penetration testing & red teaming. The toolkit helps identify…☆168Feb 25, 2026Updated 7 months ago
- A vibe-coded port of wiretap☆37Apr 25, 2026Updated 5 months ago
- A lightweight redirector for Google Cloud Run, enabling domain fronting via Google-owned infrastructure.☆155Nov 12, 2025Updated 10 months ago
- Advanced windows shellcode loader.☆51Jun 30, 2026Updated 3 months ago
- ☆43Jun 25, 2026Updated 3 months ago
- Tamper Active Directory user attributes to collect their hashes with MS-SNTP☆69Jan 21, 2025Updated last year
- A modern open-source Kubernetes auditing and investigation tool☆22Apr 10, 2026Updated 5 months ago
- a simple wii homebrew application demonstrating a simple gba input viewer☆11Apr 22, 2016Updated 10 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Bash Scripting Cheatsheet for pen-testing!☆48Sep 3, 2023Updated 3 years ago
- DSCourier is a proof-of-concept that uses the WinGet Configuration COM API to apply DSC configurations through Microsoft-signed binaries.☆210Jun 25, 2026Updated 3 months ago
- Cryptocurrency Price Ticker API in Go☆12Oct 1, 2017Updated 9 years ago
- Sigma detection rules for AI agent security monitoring☆15Jul 28, 2026Updated 2 months ago
- Open source tooling to stop ICS phishing (malicious calendar invites)☆20Feb 24, 2026Updated 7 months ago
- BlackMail is a tool for creating and sending spoof mail.☆38Nov 16, 2023Updated 2 years ago
- PoC for CVE-2026-3891 — Unauthenticated Arbitrary File Upload leading to Remote Code Execution in Pix for WooCommerce <= 1.5.0☆21Jul 20, 2026Updated 2 months ago