Browser-based log analysis exercise: find the host beaconing to a C2 server. Synthetic data. - AshongLabs/beacon-hunt

Compiler construction and formal language processing. Projects include lexical and syntax analysis with Flex/Bison, abstract syntax tree generation, translation of a C-like language into x86-64 ass...

AppleFDEKeyStore poc. Contribute to csrXamfi/CVE-2026-84520 development by creating an account on GitHub.

Log4j Exploit Detection Logic for Zeek. Contribute to corelight/cve-2021-44228 development by creating an account on GitHub.

Static unpacker, config extractor, YARA rules and IOCs for a Lumma Stealer chain delivered by a Go process-hollowing loader - ArtfulDodger10/lumma-go-analysis

WebCrack是一款web后台弱口令/万能密码批量检测工具，在工具中导入后台地址即可进行自动化检测。 - Curator-Kim/WebCrack-plus

A classis shellcode and simple loader written in pure C with using WinAPI and XOR-encryption. - Taepe13/first_shell_loader

pymap - sqlmap-style SQL injection discovery & exploitation toolkit (scanner + exploiter) - Edxx1/pymap

基于 LLMxCPG-D 的代码漏洞检测复现与离线部署：QwQ-32B 4-bit、公开 LoRA 适配器、FormAI 383 条评测与后续 CPG 流程复现。 - bpeng2550-dot/llmxcpg-reproduction

Portable GitOps POC kit for VMware vSphere Kubernetes Service (VKS): give a cluster name, ArgoCD brings up the cluster, add-ons and ingress. - edric45/vks-poc-kit

Proof-of-concept exploit for CVE-2026-1668. Contribute to tangrs/cve-2026-1668-poc development by creating an account on GitHub.

Anything about kernel security. CTF kernel pwn, kernel exploit, kernel fuzz and kernel defense paper, kernel debugging technique, kernel CVE debug. - bsauce/kernel-security-learning

Self-hosted DAST (dynamic application security testing) in one Docker image — OWASP ZAP, nuclei, katana, httpx and dalfox behind a Nuxt UI: authenticated SPA crawling, OpenAPI-driven active scans, ...

Advanced multi-threaded Clickjacking & security header vulnerability scanner with live PoC simulator. - AVII-VERSE/CJF

A comprehensive vulnerability scanner for Roblox revival servers, detecting path traversal, RCE, exposed ports, and common misconfigurations - poggersisskibidi/roblox-revival-scanner

AnyDesk Linux 8.0.2 pre-auth heap overflow RCE (AnyPwn) — PoC with vulnerability analysis & reproduction notes (fixed in 8.0.3) - mhtsec/AnyDesk-AnyPwn-RCE

RCE checker and security analyzer for Lua in embedded firmware: taint analysis, payload hunting, bytecode triage, SARIF output - doctor-labs/lua-doctor

ResetNightmare漏洞的无损利用，包含了scanner.py漏洞检测脚本以及resetNightmare.py漏洞利用脚本 - chunn1111/resetNightmareModify

An AI-powered vulnerability scanner built with Python, FastAPI, and React to detect open ports, identify network services, and generate AI-assisted security assessments with defensive recommendatio...

CVE-2026-102428 PoC: OrdaSoft Joomla OS CCK (com_os_cck) <=8.3.15 unauth SQLi — order_field/order_direction ORDER BY injection on public listings. Check + mass exploit, POCBIT-102428-OK mark...

CVE-2026-106445 — Handlebars 4.0.0–4.7.9 RCE via Function.prototype.constructor bypass (GHSA-p8wg-vrv2-v86f). PoCbit PoC + Docker lab (4.7.9), check/exploit HTTP client, GHSA template chain. Fixed ...