Bypass Windows UAC and Windows Defender detection. Contribute to raphaelthief/UAC_FUD development by creating an account on GitHub.

Unauthenticated RCE in Yamcs mission control via YAML injection in reconfigureInstance(). GHSA-wqq5-5w4p-m569, fixed in 5.13.6. - kanokwut/yamcs-reconfigure-template-injection-poc

Gotenberg <= 8.30.1 unauthenticated RCE. Contribute to 0xgh057r3c0n/CVE-2026-40281 development by creating an account on GitHub.

Contribute to ShadowForge-Cyber/CVE-2026-104286-POC development by creating an account on GitHub.

cve_poc_exp_in_github. Contribute to tki8769-v/cve_poc_exp_in_github development by creating an account on GitHub.

Ethics-first web vulnerability scanner (reflected XSS, error-based SQLi, security headers) with a deliberately vulnerable demo app - Ezra-Zhao/Web-Vuln-Scanner

Root My Galaxy (CVE-2026-43499) exploit-grooming research log for Samsung Galaxy S23 SM-S9110 (dm1q / android13-5.15). Reverse-engineering notes, experiment journals, and step-by-step beginner-frie...

GUNGNIR - DSH 红队战役指挥框架：攻击路径合成的工程化。事实库+门闸+跳板池，执行层可插拔。编排层，不含漏洞利用代码；仅限授权测试。 - 86cloudyun-afk/dsh-gungnir

Linux privesc enumerator that confirms exploitability and gives you the exact root shell command - no GTFOBins searching. - capture0x/confirmesc

Air-gapped, zero-AI binary vulnerability analysis with reproducible PoCs: reverse-engineer, detect CWEs, taint/fuzz/concolic, and prove exploitability (IP control) — fully offline. - dloucks01/lykos

Cloudflare-tunneled HTA C2 for authorized red team engagements - TREXNEGRO/HTAC2

Zero-day static analysis engine for PE/ELF malware detection using entropy analysis, heuristics, YARA rules, and machine learning. - ChronoCoders/proteus

C# .Net 5.0 project to build BOF (Beacon Object Files) in mass - ceramicskate0/BOF-Builder

DEF CON 34 workshop for redStack: deploy a Mythic/Sliver/Adaptix red team lab on AWS with Terraform and run a full boot-to-breach attack path over OpenVPN. - devZero-Security/redStack-defcon34

CPython - Critical - SNI SSLContext UAF. Contribute to abraxas/cve-2026-19445-sni-uaf development by creating an account on GitHub.

Web vulnerability scanner for versions 15 and 16, with premium and pro builds. An activator, patch, serial, activation key, and license key sit with a trial reset and a license generator, plus a fu...

Unauthenticated reflected XSS in WPForms <= 2.0.2.1 — bypass of the CVE-2026-88996 Smart Tag escaping at attribute-name position - dorkerdevil/wpforms-xss-fix-bypass

This project aimed to use IOCs and known behaviour of well known malware like Raccoon stealer, Wannacry, Neuron service to detect them using YARA - leeruien/Malware-Analysis

Defensive analysis, patch breakdown, and detection scanner for CVE-2026-14378 (WordPress DevKit Pro Plugin <= 2.3.0). - anoxhunterdump-ctrl/CVE-2026-14378-DevKit-Pro-Auth-Bypass

This is a walkthough in how to exploit the EternalBlue ms17_010 vulnerability. - AnthonyKendall/EternalBlue-VM

外部API連携で起こりやすいSSRF・PII漏洩・不安定なリトライ・Rate Limit対応漏れをpytestで検証し、GitHub Actions＋DockerでCI/CD化。カバレッジはGitHub Pagesで公開 - yaoki-dev/api-test-devops-portfolio