Red team write-up & tooling: GCP cloud exploitation lab (mcrta-exam) — leaked SA key → .git exposure → SSRF/RCE → metadata token theft → Cloud Storage bucket enumeration - alorentiar/mcrta-...

PoC — attachment import copies files from unapproved local paths in ZotLit (GHSA-4qh7-66xv-h329, CVSS 5.5). CVE pending. - squeeze440/zotlit-PoC

PoC — OIDC id_token accepted without signature/audience/expiry check in Tugtainer (GHSA-crjc-6vc7-xrfh, CVSS 8.1). CVE pending. - squeeze440/tugtainer-PoC

Contribute to enochgitgamefied/burp-games development by creating an account on GitHub.

Description: Unauthenticated Netlogon RCE vulnerability scanner & PoC research for CVE-2026-41089 (CVSS 9.8). Integrated module for AI Security Tool. - SyntaxMethod/CVE-2026-41089-Netlogon-RCE-PoC

Post CVE-2024-7344 analysis of Howyar SysReturn NetCopy - reverse engineering notes, vulnerable binaries, vendor correspondence, and proof-of-concept tooling for CVE-2026-79298 (IA-32 Secure Boot b...

Timmypanel 是自托管的私人网址导航站：登录后把常用网站按分组以卡片形式聚合到首页，多账号数据完全隔离。Go 后端 + Vue 3 前端，前端 embed 进二进制，部署产物就是一个可执行文件加一个 sqlite 文件，也有多架构 Docker 镜像。支持书签批量导入、URL 自动抓取标题图标、bookmarklet、拖拽排序、模糊搜索、公网/内网双地址切换、壁纸明暗模式、中英双语、...

Python ve Streamlit tabanlı YARA ve IOC güvenlik analiz aracı - irmygmr/YaraHunter-Y

A real-time Command and Control (C2) simulation platform for autonomous UAV swarms. Built with a decoupled microservices architecture using FastAPI, Redis, PostgreSQL, and WebSockets. - HaticeKubra...

Full-stack lab environment (Nginx/Flask/SQLite) demonstrating OWASP Top 10 web vulnerability exploitation (SQLi, Stored XSS, Comand Injection) and practical remediation. - ryj0-1/web-app-security-lab

CVE-2026-85706_docker_exp. Contribute to FlowerWitch/CVE-2026-85706_docker_exp development by creating an account on GitHub.

Process Injection is the most stealthy technique that threat actors use for creating thread in existing legitimate process. I dev this prototype to demonstrate how process injection malwares inject...

Standalone desktop and Android clients for SecureGuard Antivirus. Rust core (YARA-X + weighted scoring + entropy-based packer detection), no backend dependency, distributed via GitHub Releases only...

Contribute to Hunt-Benito/the-callback-that-outlived-the-page-cve-2026-78997-uc-browser-android-universal-xss development by creating an account on GitHub.

NBA G League block-preview XSS to NBA Identity rendezvous ATO PoC - the-good-tiger/nba-gleague-xss-poc

2026： Coruna 漏洞及 DarkSword 零日（0day）最新威胁情报. Contribute to dashen666666-gif/HDM63 development by creating an account on GitHub.

Practical blue team lab scripts — one folder per session of the Operational Defensive Cybersecurity specialisation course. - CYBERS3CPT/blueteam-labs

A scalable, multi-language remote code execution (RCE) engine built with FastAPI, Redis, Celery, and Docker to evaluate algorithmic problem-solving submissions safely. - muditaKalsan/Mini-Leetcode-...

Distributed authorised vulnerability scanner + asset inventory for Raspberry Pi (orchestrator + worker): nmap scanning, CVE matching via NVD, change detection. Allowlist-enforced. - gorkemguler/sca...

Contribute to dylan-chainguard/cve-2026-22732-poc development by creating an account on GitHub.

GUI Zapret 2 (winws2 / lua-desync) bypass DPI/TSPU - TheFirstNoob/Zapret-2-GUI