Automated batch triage and malware pre-filtering engine. Features Magic Byte masquerading detection, ephemeral archive unpacking, O(1) chunked hashing, and behavioral YARA scanning. - edmasceno/sal...

Contribute to sqkBpI7t/webshell_seo_0day development by creating an account on GitHub.

Contribute to MDhlzG0b/webshell_seo_0day development by creating an account on GitHub.

Multi-SDR RF landscape surveying tool: sweep, dwell, decode, and generate ssrf-lite candidate evidence - Chicago-Offline/rf-survey

Cloud threat hunting and exploitation simulation on AWS infrastructure. Demonstrated real-world compromise vectors including S3 public access exposure, credential exfiltration via IMDSv1 Server-Sid...

A beginner Python cybersecurity project that scans authorized hosts for open TCP ports and performs basic web security checks. - billkot/python-vulnerability-scanner

snapshot of spring-petclinic/spring-petclinic-microservices at a pinned commit, for cross platform ci legs - osflaky/exp-spring-petclinic-spring-petclinic-microservices

A modular C2 Framework developed during my final year cyber project at KIIT, featuring DNS/GitHub communication channels, custom agent modules, and a dual GUI/CLI interface - sampadghosh31/C2-Frame...

Burp Suite extension to bypass WAF by injecting junk data into HTTP requests. V2 adds auto-inject for Active Scanner/DAST, supports JSON/XML/multipart/CSV/YAML/GraphQL. Based on assetnote/nowafpls ...

Reglas de seguridad, detección de amenazas, IOC, YARA, respuestas activas, automatización y reportes para Wazuh, desarrollados a partir de implementaciones reales. - OrangeBox-Labs/Wazuh

CVE-2026-100740 PoC: D-Link DIR-895L A1_102b07 L2TP Host Name AVP out-of-bounds write in tunnel_set_params (UDP 1701). Device fingerprint + optional OOB trigger packet for authorized lab testing. h...

RayScanX 是一款开箱即用的 Web 漏洞扫描器，专注于中文 OA 系统和国产中间件的专项漏洞检测。支持 CLI 和 Web UI 双模式，一条命令即可输出可复核的扫描报告。 - ZapcoMan/RayScanX

cisco_bugsearch_analyzer. Contribute to w-index-m/cisco_bugsearch_analyzer development by creating an account on GitHub.

Private internal Burp Suite MCP adapter. No open-source license; internal use only, do not redistribute. - saif-pvt/burp-mcp

Docker study material: 13 concept guides and 8 labs covering Kubernetes, GitOps, observability and security. - SatvikPraveen/DockVerseHub

The PoC of CVE-2026-44011: Craft CMS, from 4.0.0 to before 4.17.12 and 5.9.18, contains an input-handling flaw in a Yii object creation path that let any authenticated user inject malicious configu...

一款合法授权的 若依（RuoYi）专项漏洞扫描器。插件化架构，三态判定 （CONFIRMED / SAFE / UNKNOWN），51 个 POC，支持批量扫描、WAF 绕过、 漏洞利用链、Web API 等企业级特性。 - ZapcoMan/RuoyiScanX

Open-source, on-demand malware scanner (YARA + heuristics + hash reputation + optional ClamAV). No subscription, no telemetry. - ForrestLasiter/warden

CVE-2026-8712: Unauthenticated SSRF / Backend URI Override in Wyoming HTTP API via uri Query Parameter - rahulreddykarne/CVE-2026-8712-Wyoming

A complete guide and workflow for integrating Agile sprints with DevOps CI/CD pipelines. - techupdate24/citrix-netscaler-cve-2026-8452-rce