Self-hosted, always-on external attack-surface monitoring. Finds dangling DNS, subdomain takeovers, expiring certificates and exposed services across Cloudflare, AWS and Kubernetes. Alerts via Aler...

Public security research for offsec teams, bug bounty hunters and researchers: source-backed disclosures, program policies, discovery listings, methodologies and diagrams, with structured JSON for ...

Contribute to gabrielhusa0-hash/Reflected-XSS-protected-by-CSP-with-CSP-bypass development by creating an account on GitHub.

Nacos 综合漏洞利用工具（重构版）. Contribute to gandli/NacosExploit development by creating an account on GitHub.

A Python-based web vulnerability scanner for security testing and reconnaissance - lekssayshamza/PySentinel

A lightweight SQL injection vulnerability scanner. Contribute to Counc/Sqlmap development by creating an account on GitHub.

CVE-2026-31857 - Craft CMS authenticated RCE timing verifier. - WhiteMachin3/CVE-2026-31857

面向嵌入式 C/C++ 的构建期 SBOM 工具，配一份社区共建的芯片 SDK 组件识别规则库。 识别被芯片原厂改名、魔改、静态链接后的开源组件（包括国产芯片 SDK 与国密库）， 生成 CycloneDX / SPDX 软件物料清单和 VEX，对照欧盟《网络弹性法案》（CRA）自查， 并起草 CRA 与工信部的漏洞报送材料。 - GANGMU-SBOM/gangmu

EspoCRM 9.3.3 - Authenticated SSRF via Alternative IPv4 Notation - EntroVyx/CVE-2026-33534

Forensic analysis of a double Sora AI malvertising infection: Electron MaaS fake-installer kit + Braodo-like Python infostealer. IoCs, YARA rules, MITRE mapping. Research only, no samples. - anckha...

A responsive React frontend for a full-stack blogging platform, equipped with DOMPurify for XSS protection and seamless content rendering. - vanshjain137/blog-frontend

Contribute to Stephenmiles08/inz-scan development by creating an account on GitHub.

Contribute to masterpaster1337/yara-rules development by creating an account on GitHub.

Deployment of DVWA on a local Kubernetes cluster using Docker Desktop, Minikube, Kubernetes, and MetalLB, with validation of SQL Injection, Reflected XSS, and Command Injection vulnerabilities. - n...

Independent cybersecurity research: case studies, IoCs, YARA rules, forensic methodology. Case 001: double Sora AI malvertising infection (Electron MaaS kit + Braodo-like infostealer). - anckhalion...

Trinity C2 Framework . Contribute to iamgred/Trinity development by creating an account on GitHub.

Contribute to N0K0/burp-mcp development by creating an account on GitHub.

Network forensics write-up for CyberDefenders' CCD RetailBreach lab tracing a brute-force, stored XSS, session hijack, and LFI attack chain through PCAP analysis in Wireshark. - eth-hac-ste...

Reflected XSS into HTML context with most tags and attributes blocked - Alvking/Reflected-XSS-into-HTML-context-with-most-tags-and-attributes-blocked

CTH Secure Remediation Shell prototype: DELIBERATELY VULNERABLE demo target (lodash 4.17.15 + reflected XSS). Not for deployment. CTH fixes it on a branch and opens a draft PR. - makshamsheer/CTH-P...

A Tier-1 SOC Analyst investigation of a real-world malware capture (.pcap). Features victim host profiling, HTTP C2 beacon analysis, OSINT threat intelligence, custom Suricata IDS/IPS rule engineer...