Root My Galaxy (CVE-2026-43499) exploit-grooming research log for Samsung Galaxy S23 SM-S9110 (dm1q / android13-5.15). Reverse-engineering notes, experiment journals, and step-by-step beginner-frie...

GUNGNIR - DSH 红队战役指挥框架：攻击路径合成的工程化。事实库+门闸+跳板池，执行层可插拔。编排层，不含漏洞利用代码；仅限授权测试。 - 86cloudyun-afk/dsh-gungnir

Linux privesc enumerator that confirms exploitability and gives you the exact root shell command - no GTFOBins searching. - capture0x/confirmesc

Air-gapped, zero-AI binary vulnerability analysis with reproducible PoCs: reverse-engineer, detect CWEs, taint/fuzz/concolic, and prove exploitability (IP control) — fully offline. - dloucks01/lykos

Cloudflare-tunneled HTA C2 for authorized red team engagements - TREXNEGRO/HTAC2

Zero-day static analysis engine for PE/ELF malware detection using entropy analysis, heuristics, YARA rules, and machine learning. - ChronoCoders/proteus

C# .Net 5.0 project to build BOF (Beacon Object Files) in mass - ceramicskate0/BOF-Builder

DEF CON 34 workshop for redStack: deploy a Mythic/Sliver/Adaptix red team lab on AWS with Terraform and run a full boot-to-breach attack path over OpenVPN. - devZero-Security/redStack-defcon34

CPython - Critical - SNI SSLContext UAF. Contribute to abraxas/cve-2026-19445-sni-uaf development by creating an account on GitHub.

Web vulnerability scanner for versions 15 and 16, with premium and pro builds. An activator, patch, serial, activation key, and license key sit with a trial reset and a license generator, plus a fu...

Unauthenticated reflected XSS in WPForms <= 2.0.2.1 — bypass of the CVE-2026-88996 Smart Tag escaping at attribute-name position - dorkerdevil/wpforms-xss-fix-bypass

This project aimed to use IOCs and known behaviour of well known malware like Raccoon stealer, Wannacry, Neuron service to detect them using YARA - leeruien/Malware-Analysis

Defensive analysis, patch breakdown, and detection scanner for CVE-2026-14378 (WordPress DevKit Pro Plugin <= 2.3.0). - anoxhunterdump-ctrl/CVE-2026-14378-DevKit-Pro-Auth-Bypass

This is a walkthough in how to exploit the EternalBlue ms17_010 vulnerability. - AnthonyKendall/EternalBlue-VM

外部API連携で起こりやすいSSRF・PII漏洩・不安定なリトライ・Rate Limit対応漏れをpytestで検証し、GitHub Actions＋DockerでCI/CD化。カバレッジはGitHub Pagesで公開 - yaoki-dev/api-test-devops-portfolio

24/7 serverless CVE & CISA KEV threat intel bot with EPSS scoring, GitHub PoC search, and Telegram alerts - realsandeep1271-ui/ThreatPulse-AI

Divi Membership (DiviEngine) pre-auth admin takeover — CVE-2026-19660 paypal_param bypass. Python PoC with exploit + cookie export. - murrez/CVE-2026-19660

PoC for CVE-2026-14378: DevKit Pro ≤2.3.0 unauthenticated admin takeover via original_user_id cookie + revert_switch nonce. check/admin + mass scan. - murrez/CVE-2026-14378

AI 自动化漏洞挖掘系统：五阶段状态机（侦察/扫描/验证/学习/报告）+ 硬约束安全策略层 + OOB 带外验证 + 学习闭环 - csjad/ai-vuln-hunter

Detection-first, evidence-preserving incident-response toolkit for Zimbra CVE-2026-73570. Includes read-only host checks, IOC feeds, triage, persistence, containment, and recovery guidance based on...