Proof infrastructure for autonomous vulnerability patching — proves in your own CI build whether a CVE is actually exploitable, at PR time. - ferralon-ai/ferralon-assay

CVE-2026-89013 Exploit — Authorization bypass in Dolibarr via the hashp parameter, enabling unauthenticated access to protected documents and files. - Faceless0x7/CVE-2026-89013

CVE-2026-89012 Exploit — SQL filter denylist bypass in Dolibarr via case-insensitive SQL column resolution and case-sensitive denylist matching. - Faceless0x7/CVE-2026-89012

JOCKY - forensic scripting framework that runs without triggering security solutions (SIH 2026, PS SIH26148, NTRO). Custom language, polymorphic bytecode, native Rust VM, C2 fabric. - A73r0id/jocky

🛡️ Official AI Security Tool module for CVE-2026-21858 + CVE-2025-68613 (n8n "Ni8mare" Unauthenticated Arbitrary File Read & Expression Injection RCE Full Chain). - ZeroDa...

Static and dynamic JavaScript analyzer for detecting DOM-based XSS sources and dangerous sinks in web applications. - legacy-so/domxss_hunter

P-02 | OWASP Top 10 web vulnerability scanner with AI-powered exploit suggestions - jmsD3v/webhunter

Converts ATR Rules to Google SecOps Yara-L Rules. Contribute to ajaynyayapathi/ATR-to-Yara-L-Converter development by creating an account on GitHub.

YARA-backed SOC detector with a live dashboard: real-time file monitoring, time-windowed auth telemetry correlation, and in-place triage. Stdlib-only server. - gocar112/security-suite-dashboard

F-02 | Static malware analyzer — PE analysis, YARA-lite rules, entropy, IOC extraction, AI verdict - jmsD3v/malwarescope

PHP + MySQL Web 安全教学靶场，包含 8 个典型 Web 漏洞、漏洞复现、修复版本及渗透测试报告。 - shayebuhui23/vuln-campus-cms

A web-based Network Vulnerability Scanner built with Python, Streamlit, Nmap, and MariaDB. It scans networks for open ports and running services, stores scan results, and presents security informat...

Contribute to guguguc/c2 development by creating an account on GitHub.

Complete, practical Google Cloud Professional Security Operations Engineer study guide. Features YARA-L detection rule engineering, Google SecOps (SIEM/SOAR) setups, Security Command Center archite...

Complete, practical Google Cloud Professional Security Operations Engineer study guide. Features YARA-L detection rule engineering, Google SecOps (SIEM/SOAR) setups, Security Command Center archite...

IPv6 DNS takeover & NTLM relay attack chain in Active Directory using mitm6 — covering DHCPv6 spoofing, LDAP/LDAPS relay, passback attacks, and blue-team defenses. - mehedi-hasan-sami98/mit...

Agent of Death is an AI powered AI Agent vulnerability scanner. - Deaths-Head-Software/Agent-of-Death

可恢复的 DSH 渗透测试模式：资产归档、证据复核、断点续跑与 Web 可视化. Contribute to baianquanzu/dsh-pentest development by creating an account on GitHub.

Self-contained Red vs Blue cyber range lab simulating a Cookie Reuse & MFA Bypass vulnerability (XSS session replay) with full attack telemetry for Blue Team forensics. - DarthWakamiya/Cybe...

Experimentation. Contribute to J-Dheeraj/AI-exploit-CVE development by creating an account on GitHub.

Red vs. Blue CTF lab: stored XSS → cookie theft → MFA bypass via session replay, with Blue Team log forensics. Dockerized, single-VM deployment. - christopherbaptista/red-blue-ctf-lab