PoC for GhostCommit Attack: Steal secrets via a pull request pointing to an image
☆32Aug 19, 2026Updated 3 weeks ago
Alternatives and similar repositories for ghostcommit
Users that are interested in ghostcommit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 基于Pocsuite3、goby编写的漏洞poc&exp存档☆12Nov 19, 2023Updated 2 years ago
- This repo contains a proof-of-concept exploit for CVE-2026-15409. It establishes non-root remote code execution on SonicWall SMA 1000 by …☆27Jul 15, 2026Updated last month
- ☆24Feb 27, 2026Updated 6 months ago
- 第八届 “强网杯” 全国网络安全挑战赛☆21Nov 11, 2024Updated last year
- ☆12Jun 12, 2023Updated 3 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Post release curated articles (MarkDown & Corrections)☆19Jul 13, 2026Updated 2 months ago
- ☆68Jun 1, 2026Updated 3 months ago
- Bug bounty focused JavaScript security analysis for crawling web assets, source maps, and secret discovery☆65Aug 1, 2026Updated last month
- Threat Hunting Malware Infrastructure☆12Dec 3, 2023Updated 2 years ago
- Vulnerability and security bulletins related to Palantir software products.☆13Mar 3, 2023Updated 3 years ago
- UnFuck Windows Setup☆24Aug 16, 2024Updated 2 years ago
- A bug bounty tool for bypassing 401/403 access restrictions and testing endpoint accessibility.☆52Sep 6, 2026Updated last week
- SafeHarbor revamped with Direct Syscalls using InlineWhispers3☆15Feb 16, 2026Updated 6 months ago
- Malware, tooling, logs, IOCs and intelligence☆58Aug 31, 2026Updated last week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A podman ubuntu 24.04 container that serves a MCP server; with file, code execution, bash shell, knowledgebase, and more.☆22Mar 27, 2026Updated 5 months ago
- ☆12May 25, 2026Updated 3 months ago
- Binary Ninja Plugins to work with Unpac.Me unpacking service☆13Apr 24, 2025Updated last year
- A critical severity Remote Code Execution (RCE) vulnerability (CVE-2023-22527) was discovered in Confluence Server and Data Center.☆22Jan 23, 2024Updated 2 years ago
- ☆56Aug 21, 2026Updated 3 weeks ago
- Sherlock Mail is a sophisticated email intelligence tool that leverages artificial intelligence and machine learning to provide comprehen…☆15Dec 6, 2024Updated last year
- This repository provides Python tools for training and using the TEGNet neural network to predict thermoelectric generator (TEG) performa…☆20Nov 14, 2025Updated 9 months ago
- 一个类似sqlmap的RCE自动化工具☆52Jan 27, 2025Updated last year
- Okta Data Collector for BloodHound Community☆17Apr 21, 2026Updated 4 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- WebStrike 是一套以 Chromium 系浏览器扩展（Manifest V3） 为受控端点的指挥与控制（C2）套件。与传统以进程/驱动为主的 C2 相比，其工作重心落在 浏览器安全域：在合规授权与攻防演练场景下，可显著降低与终端 EDR 在 进程注入、驱动、内核回调…☆87Jul 8, 2026Updated 2 months ago
- Industrial Software Development (MSc Computer Engineering, Cybersecurity and AI, University of Cagliari, Italy)☆23Dec 17, 2025Updated 8 months ago
- EncryptInterceptor fail-open bypass in Apache Tomcat Tribes clustering leading to unauthenticated RCE via Java deserialization.☆70May 11, 2026Updated 4 months ago
- Skeleton (but pronounced like Peloton): A Zero-Click RCE exploit for CVE-2021-0326☆21Mar 16, 2022Updated 4 years ago
- CVE-2026-45250: FreeBSD 14.4 setcred kernel buffer overflow (LPE)☆22Jul 23, 2026Updated last month
- Windfall - Unauthenticated RCE exploit chain for Windmill & Nextcloud Flow (CVE-2026-29059). Path traversal + credential leak + PostgreSQ…☆18Apr 7, 2026Updated 5 months ago
- ☆15Mar 27, 2026Updated 5 months ago
- Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.☆62Sep 3, 2026Updated last week
- Automatically deploying Mythic C2 in Azure using Terraform☆25Jul 3, 2026Updated 2 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Documentation for the SecureDrop project☆28Updated this week
- A single-page resume template completely typeset with HTML & CSS.☆20Aug 15, 2018Updated 8 years ago
- Proof-of-concept security demo illustrating how PowerShell can create trusted-looking Windows toast notifications chained together with C…☆18Apr 12, 2026Updated 5 months ago
- Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.☆49Updated this week
- Smuggling C2 comms through links previews☆18Jun 17, 2026Updated 2 months ago
- Project Guiding Star -- A CTF contest platform by PKU GeekGame Team☆64Oct 27, 2025Updated 10 months ago
- Implementation of KlezVirus' silent moonwalk approach for payloads☆18Feb 13, 2026Updated 6 months ago