Web console for the Rshell C2 framework — Vue 3 + TypeScript + Element Plus - Rubby2001/Rshell-web

POC CI/CD with Jenkins. Contribute to princehann/jenkins-shared-library development by creating an account on GitHub.

云安全与AI基础设施学习平台：隐私计算、密钥管理、云原生等模块化学习网站. Contribute to lychee27z/cloud-security-learning development by creating an account on GitHub.

轻量漏洞扫描工具. Contribute to whhcraft/whh_scan development by creating an account on GitHub.

Du CRLF du XSS Stored et un vol de session. Contribute to Hack-Oeil/CRLF_XSS_STORED_SESSION development by creating an account on GitHub.

Premier CTF en XSS DOM. Contribute to Hack-Oeil/XSS_DOM_TRADINGVIEW development by creating an account on GitHub.

A simple beginner-level vulnerability scanner developed checking a website for commonly used security-related issues. - arjunbhardwaj19/Basic-Vulnerability-Scanner-

Red team write-up & tooling: GCP cloud exploitation lab (mcrta-exam) — leaked SA key → .git exposure → SSRF/RCE → metadata token theft → Cloud Storage bucket enumeration - alorentiar/mcrta-...

PoC — attachment import copies files from unapproved local paths in ZotLit (GHSA-4qh7-66xv-h329, CVSS 5.5). CVE pending. - squeeze440/zotlit-PoC

PoC — OIDC id_token accepted without signature/audience/expiry check in Tugtainer (GHSA-crjc-6vc7-xrfh, CVSS 8.1). CVE pending. - squeeze440/tugtainer-PoC

Contribute to enochgitgamefied/burp-games development by creating an account on GitHub.

Description: Unauthenticated Netlogon RCE vulnerability scanner & PoC research for CVE-2026-41089 (CVSS 9.8). Integrated module for AI Security Tool. - SyntaxMethod/CVE-2026-41089-Netlogon-RCE-PoC

Post CVE-2024-7344 analysis of Howyar SysReturn NetCopy - reverse engineering notes, vulnerable binaries, vendor correspondence, and proof-of-concept tooling for CVE-2026-79298 (IA-32 Secure Boot b...

Timmypanel 是自托管的私人网址导航站：登录后把常用网站按分组以卡片形式聚合到首页，多账号数据完全隔离。Go 后端 + Vue 3 前端，前端 embed 进二进制，部署产物就是一个可执行文件加一个 sqlite 文件，也有多架构 Docker 镜像。支持书签批量导入、URL 自动抓取标题图标、bookmarklet、拖拽排序、模糊搜索、公网/内网双地址切换、壁纸明暗模式、中英双语、...

Python ve Streamlit tabanlı YARA ve IOC güvenlik analiz aracı - irmygmr/YaraHunter-Y

A real-time Command and Control (C2) simulation platform for autonomous UAV swarms. Built with a decoupled microservices architecture using FastAPI, Redis, PostgreSQL, and WebSockets. - HaticeKubra...

Full-stack lab environment (Nginx/Flask/SQLite) demonstrating OWASP Top 10 web vulnerability exploitation (SQLi, Stored XSS, Comand Injection) and practical remediation. - ryj0-1/web-app-security-lab

CVE-2026-85706_docker_exp. Contribute to FlowerWitch/CVE-2026-85706_docker_exp development by creating an account on GitHub.

Process Injection is the most stealthy technique that threat actors use for creating thread in existing legitimate process. I dev this prototype to demonstrate how process injection malwares inject...