Security research PoC. Authorized testing only. Contribute to kashishtopi/hyperdx-clickhouse-proxy-ssrf development by creating an account on GitHub.

Security research PoC. Authorized testing only. Contribute to kashishtopi/cronicle-docker-hardcoded-secret-key-rce development by creating an account on GitHub.

Contribute to Nisarga-Astakar/Web-Vulnerability-Scanner development by creating an account on GitHub.

Live Linux threat hunting for incident responders: fileless implants, injected code, rootkits, stealthy persistence, webshells and backdoor sockets. Static Rust binary, YARA, MITRE ATT&CK m...

A file upload scanner that flags malicious files in real time using YARA rule matching and VirusTotal lookups, powered by a Django + Celery + Redis backend for async scanning. - Shrak-24/malware-up...

2026年10月｜ComfyUI → Pillow → OpenJPEG 链式漏洞：上传一张 11MB 的 JPEG2000 图片即可打穿系统完成远程 RCE 全链路（aarch64 Linux glibc 实测） - giaoimgiao/comfyui-openjpeg-rce

Kubernetes-native VM orchestration without KubeVirt or libvirt. Kubernetes declares. Kairon orchestrates. FluxVM executes. - zyvorai/zyvor-kairon

High-performance, asynchronous network scanner and vulnerability assessment tool featuring automated service detection, NIST NVD CVE correlation, and multi-format reporting (HTML, JSON, CSV). - MEl...

Reactor es una máquina Linux fácil vulnerable a CVE-2025-55182 (React2Shell), RCE sin autenticación en React Server Components. Accedemos como node, crackeamos un hash MD5 de una base de datos SQLi...

A simple python script PoC for CVE-2026-104286 ( FortiMail PathTraversal Critical Vulnerability ) - 0xREBYTE/CVE-2026-104286-PoC

cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation - sakidekin/CVE-2026-41940-PoC

Static RE assistant: auto-deobfuscation hints, packer triage and embedded payload detection for ELF binaries. - Haind03/lucid-rev

Developed a C++17 Local Procedure Call (LPC) system using Unix Named Pipes and scatter/gather I/O. Engineered a custom binary protocol with asynchronous multi-threading, deep payload inspection to ...

Unauthenticated RCE in WordPress Forminator Forms <= 1.56.1 (CVSS 9.8) - 0x4cr/CVE-2026-15748

js, web lhf, xss(reflected, stored), sqli. Contribute to khawtomkung/loc-camp9-hackday-labs development by creating an account on GitHub.

Deliberately vulnerable Flask e-commerce app with 7 working exploit scripts and a 1,200+ line automated 8-phase vulnerability scanner; achieves 95% risk reduction (37→2/100) across the hardened imp...

Self-hosted web vulnerability scanning platform — 200 deterministic scanner modules, evidence-backed CVSS-scored reports, HTML/PDF output, continuous monitoring. Zero AI at scan time. Laravel · Doc...

CVE-2026-102489 exploit in golang. Contribute to 1xPwn/CVE-2026-102489 development by creating an account on GitHub.

有限空间无限探索. Contribute to xijiangyue-0op/0day-skill development by creating an account on GitHub.

RuleHunt - YARA Sigma Nuclei rules repository. Contribute to aoodiakdiro0001-ops/rulehunt development by creating an account on GitHub.

Independent reconstruction, lab validation, and PoC for CVE-2026-72898 — Metabase unauthenticated SQLi (patched in 0.63.5) - Riftweld/metabase-cve-2026-72898