Sliver C2 adversary emulation against a Windows 11 victim on an isolated network: 7 ATT&CK techniques and 3 Sigma detection rules. - ronankongala/red-team-c2-lab

This will be a public repo for Yara/Sigma Detection Rules - TACyber7/Yara-Sigma-Detection-Rules

DOM-XSS Practice Hub. Contribute to drg1bl3ts/DOM-XSS development by creating an account on GitHub.

YuCode — 本地优先的 AI 安全作战台（渗透测试工作台 + 多智能体协作）。本仓库仅公开文档与发行包，源码不公开。 - sywinksvg/YuCode

Vet third-party Claude Code skills in a disposable Docker sandbox before installing them - Yehiak/skill-quarantine

CVE-2026-96349 — WordPress SiteSkite plugin ≤2.1.8 unauthenticated RCE (CVSS 10.0, CWE-94). PoCbit mass-exploit PoC: legacy API-key autologin (?token=) + REST MCP siteskite_execute_php eval chain; ...

DeepSeek API account balance and per-run usage cost in the DSH web GUI sidebar footer. The API key stays in the host process: no shell, no sandbox bypass, official endpoint only. - CH2008445/dsh-ap...

A desktop workbench for writing, validating, compiling, and testing YARA rules. - corelight/quipu

# ComConver PTB-python 是一个基于 Python 的 Windows 便携版应用。它内置 Python 运行时与所需依赖，无需系统预装 Python，也不修改注册表或系统目录，可放在 U 盘或任意文件夹中直接运行。程序支持以管理员权限启动，适合需要提权操作的工具类场景。 本项目源码以 LGPL 许可证开源。发行版中包含 Python Software Foundati...

A hybrid desktop vulnerability scanner — Socket, Nmap, SQLi, XSS, and AI Advisor - wesssso512/Jet-Vuln-Scanner

Contribute to realsandeep1271-ui/cve-intelligence-bot development by creating an account on GitHub.

SSTI Security Research Platform — 5-stage attack chain across Jinja2, Handlebars, Nunjucks & Mako · FastAPI + React+TS+Vite - het-P301204/render

Skin and theme Apple Wallet cards and lockscreen passcodes on iOS 18+ from Windows—no jailbreak needed. - Lauracol26/AirCard-Windows

critical-severity unauthenticated Remote Code Execution (RCE) vulnerability impacting Orkes Conductor - Ez4rd1x1/CVE-2026-58138-Research

Lightweight web security scanner & TCP port scanner written in Python. - mjibral466/python-vulnerability-scanner

CVE-2026-92966 — WordPress LatePoint ≤5.7.0 unauthenticated stored shortcode execution (CVSS 9.1, CWE-94). PoCbit mass-exploit PoC: plant [caption]/custom shortcode in booking first name → Customer...

WhatsApp-first verification & safety platform — checks URLs, files, images, audio, video & govt docs; deepfake detection, malware analysis, zero-cloud, CPU-only - DawnofGenX/vishwas

中文漏洞知识库，整理 Web、中间件、网络设备与系统漏洞的原理和公开复现资料，支持按产品、CVE、指纹检索。Chinese vulnerability knowledge base. - Ares-X/VulWiki

专注追踪2026最新 iOS Coruna漏洞 及 DarkSword 0day 动向. Contribute to dashen666666-gif/coruna development by creating an account on GitHub.

Contribute to gabrielhusa0-hash/Lab-Reflected-XSS-into-a-JavaScript-string-with-single-quote-and-backslash-escaped development by creating an account on GitHub.