Production-grade full-stack URL shortener SaaS with real-time analytics, dynamic QR codes, custom aliases, SSRF security guard, rate limiting, and Next.js 15 App Router. - VinayKrishna-7/Url_shortener

lightweight Linux command-and-control (C2) framework - imankhayam/echidna

Burp extension that auto-names Repeater tabs to "{METHOD} {PATH}" - sdushantha/repeater-tab-auto-namer

Investigation note, IOCs, YARA rules and samples for crisp-worker-rig, a self-healing WordPress backdoor with Ethereum (EtherHiding) C2 - rwillmann/crisp-worker-rig-investigation

CVE-2026-42978 Windows Push Notifications (WpnService) Use-After-Free & Race Condition PoC research, diagnostic scanner, and security audit module for AI Security Tool. - SyntaxMethod/CVE-2...

PoC for CVE-2026-85706: GitLab CE/EE unauthenticated arbitrary local file read - solivaquaant/CVE-2026-85706-PoC

ACRA is a Burp Suite extension for advanced authorization security auditing, correlating URI, identity, role, tenant, resource ownership, workflow state, policy, and evidence to identify access-con...

A Go-based vulnerability scanner for Linux hosts that checks installed packages against Red Hat, Debian, Ubuntu, and Alpine CVE feeds, then reports impacted packages with version-aware matching, su...

Proof infrastructure for autonomous vulnerability patching — proves in your own CI build whether a CVE is actually exploitable, at PR time. - ferralon-ai/ferralon-assay

CVE-2026-89013 Exploit — Authorization bypass in Dolibarr via the hashp parameter, enabling unauthenticated access to protected documents and files. - Faceless0x7/CVE-2026-89013

CVE-2026-89012 Exploit — SQL filter denylist bypass in Dolibarr via case-insensitive SQL column resolution and case-sensitive denylist matching. - Faceless0x7/CVE-2026-89012

JOCKY - forensic scripting framework that runs without triggering security solutions (SIH 2026, PS SIH26148, NTRO). Custom language, polymorphic bytecode, native Rust VM, C2 fabric. - A73r0id/jocky

🛡️ Official AI Security Tool module for CVE-2026-21858 + CVE-2025-68613 (n8n "Ni8mare" Unauthenticated Arbitrary File Read & Expression Injection RCE Full Chain). - ZeroDa...

Static and dynamic JavaScript analyzer for detecting DOM-based XSS sources and dangerous sinks in web applications. - legacy-so/domxss_hunter

P-02 | OWASP Top 10 web vulnerability scanner with AI-powered exploit suggestions - jmsD3v/webhunter

Converts ATR Rules to Google SecOps Yara-L Rules. Contribute to ajaynyayapathi/ATR-to-Yara-L-Converter development by creating an account on GitHub.

YARA-backed SOC detector with a live dashboard: real-time file monitoring, time-windowed auth telemetry correlation, and in-place triage. Stdlib-only server. - gocar112/security-suite-dashboard

F-02 | Static malware analyzer — PE analysis, YARA-lite rules, entropy, IOC extraction, AI verdict - jmsD3v/malwarescope

PHP + MySQL Web 安全教学靶场，包含 8 个典型 Web 漏洞、漏洞复现、修复版本及渗透测试报告。 - shayebuhui23/vuln-campus-cms