Temporary root on locked-bootloader vivo devices (tested: S17 Pro / PD2284 / MT6896Z / 5.10.233) without wiping data. Root cause: vivo prepends "vivo " to MODULE_ARCH_VERMAGIC, so...

Defensive Cybersecurity Suite: 100 enterprise-grade Python security tools, forensic analyzers, packet inspectors, and automated incident response scripts. - ShreeshaAnandPujar/Aegis-BlueTeam

Owned Netlify Create asset-source URL XSS proof fixture - lmzkjmiajzj-lgtm/netlify-create-asset-source-xss-owned-poc

Owned Netlify Create custom-control XSS proof fixture - lmzkjmiajzj-lgtm/netlify-create-custom-control-xss-owned-poc

🛡️ Lightweight modular YARA-based file scanner in Python for threat hunting and incident response. Detects malware, web shells, ransomware, and obfuscated scripts with a simple CLI. - VasylPopyk/ya...

面向 Claude Code 的 .NET + Node.js 前后端全栈白盒代码安全审计 Skill 集合：数据流分析 + 业务逻辑验证方法论，80+ 漏洞/框架专项，跨端契约对账与污点链拼接，输出证据驱动、可落地修复的审计报告。 - ZMR0zhangmouren/fullstack-code-audit-skill-zh

Infrastructure recon and exploitation framework for authorized pentesting — port scanning, service fingerprinting, brute force, and a chained RCE extractor. - fcarvajalbrown/port-scanner

CVE-2026-63030 + CVE-2026-60137 exploit RCE chain. - gichirimaku/wp2shell-PoC

A cybersecurity project focused on identifying potential vulnerabilities in web applications and improving web application security. - yashu210274/Web-Vulnerability-Scanner

pfSense CE 2.9.0-DEVELOPMENT - Medium - Remote - XSS - crash_reporter textarea - abraxas/pfsense-crash-reporter-xss

pfSense CE 2.9.0-DEVELOPMENT - Medium - Remote - XSS - LDAP username in head.inc - abraxas/pfsense-auth-username-xss

Local defensive TCP, TLS and HTTP configuration workbench with FastAPI, React, explicit authorization scope and evidence-only reports. Learning project, not a confirmed-vulnerability scanner. - ar-...

Lockfile vulnerability scanner in Go: 7 formats, OSV.dev, CVSS scoring, alias merging, SARIF + GitHub Action. Matches osv-scanner 90/90 on a 600-package project. - Revind4k/lockscan

Static analysis of seven CRPx0 ransomware builds: recovery tool, implementation faults, YARA/KQL/Elastic detections, independent reproduction. No samples. - Weirdlogic/crpx0-static

Python-based C2 beacon detection using connection timing analysis, with improved CSV error handling and automated tests. - Yugsalecha812/c2-beacon-detector

Contribute to DoanTien09/shellcode_evasion_framework development by creating an account on GitHub.

RCE standard host libraries: pure-RCE crypto, ML-KEM/PQXDH, HPKE and MLS - openIE-dev/rce-stdlib

#. Contribute to nowak0x37/Java-Insecure-Deserialization---Burp-Suite-Extension development by creating an account on GitHub.

PayLedger is a web-based payment application that addresses two major security vulnerabilities: Stored Cross-Site Scripting (XSS) and Insecure Direct Object References (IDOR). It aims to prevent ma...

CVE-2026-64507 — PoC: IBPB flush on BPF JIT allocation - manalejandro/CVE-2026-64507

Self-hosted uptime monitor that shows why a check failed: phase timings, failure classes, incidents, SSRF-safe probing. FastAPI + Postgres + React. - TheInfiniteLoop22/SignalNest