轻量级 CAASM 与内网安全扫描工具，支持多来源资产归并、安全对账、服务识别、漏洞验证、变更 Diff 和报告，提供 CLI、API 与 Web 控制台。 - yuhuamiao/yscan

Linux vulnerability research from LinnemanLabs - security advisories, CVEs, exploits, reproducible PoCs. - linnemanlabs/advisories

A scalable LeetCode clone & Remote Code Execution (RCE) engine. Demonstrates how platforms handle heavy code-compilation by offloading to background workers using Node.js, BullMQ & ...

HackTheBox "Cobblestone" — Insane Difficulty — Second-Order SQLi to Twig SSTI to Cobbler RCE Writeup - FindYourBugs/cobblestone-writeup

Export HTML Table to Sheet. Contribute to gavodagbe/sheets-export-poc-spring development by creating an account on GitHub.

A beginner-friendly Python Vulnerability Scanner that detects open ports, basic security misconfigurations, and potential vulnerabilities, while generating a simple security assessment report. - ru...

Contribute to rmhowe425/POC-CVE-2026-19296 development by creating an account on GitHub.

A PoC exploit for CVE-2026-24061 - GNU InetUtils telnetd Argument Injection Authentication Bypass - iLokaas/CVE-2026-24061-payload

Desktop malware scanner for files and URLs — check before you run or download. Local engines (ClamAV, YARA-X, Defender), hash reputation, and an ML model. Python, PySide6/QML. - TyomPapiyan/PreScan

NetSecurePro IA Lab - Meta+1 SSRF and Anti-TOCTOU Socket Pinning Validator - milyes/netsecurepro-ia-lab

REDTIDE — an asynchronous web application security scanner for red-team engagements and penetration testing. Combines active vulnerability detection (XSS, SQLi, SSTI, SSRF, LFI, and more), passive ...

HackTheBox "Abducted" — Medium Difficulty — Samba Print-Spooler RCE & Privilege Escalation Writeup - FindYourBugs/abducted-writeup

A research-grade Windows C2 framework in Go: TLS-encrypted beaconing, 40+ post-exploitation modules, AMSI/ETW bypass, process injection, UAC escalation, and a template-based implant builder. - luci...

Contribute to rmhowe425/POC-CVE-2026-19286 development by creating an account on GitHub.

Automated Python dependency vulnerability scanner. Contribute to mohrez-004/osv-vuln-scanner development by creating an account on GitHub.

Sandbox: does skipping CodeQL on PR events bypass a code scanning ruleset? - simulacra-ghas-lab/ghas-merge-protection-demo

MCP server for low-level Windows process memory research. Typed reads/writes, AOB scans, x64 inline hooking, PEB introspection, server-side Lua 5.4. - Boti-Ormandi/memscope-mcp

Supervised penetration-testing orchestrator in Go with SARIF 2.1.0 compliance, Dockerized scanners, and SHA-256 audit trails. - lucasmartins-ai/lookapentest

CVE-2026-82286 — gpt-crawler <=1.5.1 unauthenticated arbitrary file write via outputFileName (POST /crawl). PoC + self-contained Docker lab. CVSS 8.6, CWE-22. - BiiTts/CVE-2026-82286-gpt-cra...

Contribute to Kyuda1-0/ttd-xss-poc development by creating an account on GitHub.

Improves vulnerability prioritization by enhancing CVSS scores with exploit intelligence. Combines data from CISA KEV, EPSS, Metasploit, and other sources to create actionable severity ratings that...