PoC for CVE-2020-36847: unauthenticated file upload to RCE in WordPress Simple File List <=4.2.2. Uploads PHP as .png, renames to .php via ee-file-engine.php, verifies execution. Single targ...

PoC for CVE-2024-25600: unauthenticated RCE in WordPress Bricks Builder <=1.9.6. Extracts the render_element nonce, probes both REST endpoints, confirms exploitability, and opens an interact...

Contribute to Saku0512/CVE-2026-104100-poc development by creating an account on GitHub.

RootMyGalaxy for Galaxy S23 Ultra SM-S9180 (FZG1) - temp root via CVE-2026-43499, KernelSU late-load, no partition flashing, no Knox - deancyl/s9180-rootmygalaxy

Reproducible research project for evaluating layered web-security hardening in Django against XSS, CSRF, SQL Injection, and Clickjacking, with the proposed Weighted Defense Coverage Score (WDCS) me...

Demo Repository for PoC (Proof-of-Concepts). Contribute to devopscorner/demo development by creating an account on GitHub.

Collection of YARA, Suricata, Sigma and capa rules for detecting various malware threats - gemesa/threat-detection-rules

Hybrid static malware detection for Windows PE files, combining heuristics, a LightGBM model and YARA rules, with explainable verdicts. - Adii-Digital/SecureScan-Pro-AI-Hybrid-Malware-Detection-System

A Secure Version of CVE-2026-53787 Amasty Order Attribute File Upload Exploit,with the modification of file upload of txt to html. - elitexspam/Def4cer

Contribute to Saku0512/CVE-2026-34157-poc development by creating an account on GitHub.

Personal repository, for storing Yara rules created through independent research. - 0xx0d4y/YaraRules

Incident response case study & detection kit — PrestaShop backdoor: webshells, droppers, C2, YARA rules, cleanup playbook. - E-delSol/prestashop-backdoor-recovery

Bypass MFA by reverse proxy | Educational purpose only!! - Q-9999/Project-IAO-Bypass-2FA-by-Reverse-Proxy

Runtime DOM-based XSS, Trusted Types, DOMPurify & prototype pollution detector for modern browsers - NULL200OK/NULL200OK_fetch_DomXss

Zack-BypassWeb是可一键生成适配冰蝎4.1的 JSP / JSPX / PHP / ASP / ASPX / ASHX 六种 Webshell，内置 15 种以上的代码混淆与免杀技术，在保证冰蝎正常连接的前提下，最大程度规避主流安全产品的查杀。 - ZackSecurity/Zack-BypassWeb

源码获取：ym7k.com/19661/源码7k-【遥辉正版】APK报毒免杀处理分发系统专业版. Contribute to ASFsxs/-7k--APK- development by creating an account on GitHub.

CVE-2026-98180 — drm/msm use-after-free of the scheduler-containing ring and VM objects (fixed by 01c8d1f385f7) - MalHyuk/CVE-2026-98180

Python-based basic vulnerability scanner developed for the IncodeVision Cybersecurity Internship. - SowmyashreeRG/IncodeVision-Cybersecurity-Internship

Hybrid static malware detection for Windows PE files, combining heuristics, a LightGBM model and YARA rules, with explainable verdicts. - nibble-sec/SecureScan-Pro

Small threat-detection lab: scan files, logs and processes against IOCs and YARA rules, get an incident-style report. - FredBourouliou/mini-soc-ioc-lab