A PoC exploit for CVE-2026-24061 - GNU InetUtils telnetd Argument Injection Authentication Bypass - iLokaas/CVE-2026-24061-payload

Desktop malware scanner for files and URLs — check before you run or download. Local engines (ClamAV, YARA-X, Defender), hash reputation, and an ML model. Python, PySide6/QML. - TyomPapiyan/PreScan

NetSecurePro IA Lab - Meta+1 SSRF and Anti-TOCTOU Socket Pinning Validator - milyes/netsecurepro-ia-lab

REDTIDE — an asynchronous web application security scanner for red-team engagements and penetration testing. Combines active vulnerability detection (XSS, SQLi, SSTI, SSRF, LFI, and more), passive ...

HackTheBox "Abducted" — Medium Difficulty — Samba Print-Spooler RCE & Privilege Escalation Writeup - FindYourBugs/abducted-writeup

A research-grade Windows C2 framework in Go: TLS-encrypted beaconing, 40+ post-exploitation modules, AMSI/ETW bypass, process injection, UAC escalation, and a template-based implant builder. - luci...

Contribute to rmhowe425/POC-CVE-2026-19286 development by creating an account on GitHub.

Automated Python dependency vulnerability scanner. Contribute to mohrez-004/osv-vuln-scanner development by creating an account on GitHub.

Sandbox: does skipping CodeQL on PR events bypass a code scanning ruleset? - simulacra-ghas-lab/ghas-merge-protection-demo

MCP server for low-level Windows process memory research. Typed reads/writes, AOB scans, x64 inline hooking, PEB introspection, server-side Lua 5.4. - Boti-Ormandi/memscope-mcp

Supervised penetration-testing orchestrator in Go with SARIF 2.1.0 compliance, Dockerized scanners, and SHA-256 audit trails. - lucasmartins-ai/lookapentest

CVE-2026-82286 — gpt-crawler <=1.5.1 unauthenticated arbitrary file write via outputFileName (POST /crawl). PoC + self-contained Docker lab. CVSS 8.6, CWE-22. - BiiTts/CVE-2026-82286-gpt-cra...

Contribute to Kyuda1-0/ttd-xss-poc development by creating an account on GitHub.

Improves vulnerability prioritization by enhancing CVSS scores with exploit intelligence. Combines data from CISA KEV, EPSS, Metasploit, and other sources to create actionable severity ratings that...

WooCommerce plugin: safe formula-based product pricing, closing CVE-2026-4001's eval()-based RCE - htrxuan/hdwebmobile-formula-pricing

Contribute to RootKaito/nuclei-community-templates development by creating an account on GitHub.

Blue-team/SOC scripts — brute-force log detection, YARA rule testing, and hash identification/cracking. Companion repo to Bugbounty (red-team toolkit - toradesourav/Soc-Blue-team-toolkit

Vue 3 and NestJS toy project demonstrating layered Stored XSS defenses - edgarshlee/secu-toy-stored-xss

Community-driven repository for YARA rules, threat hunting signatures, and behavioral detection logic created during malware analysis and reverse engineering. - ayush-malwarex/threat-hunting-rules

Contribute to Stuck1224/burp_gzip_encoder development by creating an account on GitHub.