Build reproducible vulnerable (and patched) target containers from templates, in a verified state, so you can validate any scanner, exploit, or detection rule against ground truth. - ruzfi/vulnsuite

Turn HTML strings into React and React Native elements, sanitized by default. No dangerouslySetInnerHTML. - devmaxxx/react-html5-parser

Self-contained, hands-on security-training kit for CSS exam prep — intentionally-vulnerable web apps + forensics labs (PKI, PCAP, email, TLS, privesc, hashes), each with goals, solutions & ...

BSAS - Bilibili social analysis system: anti-harassment forensics + moderation. Public data only, evidence grading, no WAF/login bypass. Report: https://llylab.github.io/firefur/ - LLYlab/firefur

Standalone, pluggable editor for detection rules (YARA, Sigma, Suricata, ...) - rulezet/rulezet-editor

Contribute to samseyed/ispaychain-scam-yara development by creating an account on GitHub.

DVWA deployment on Minikube with SQL Injection, Reflected XSS, and Command Injection demonstrations - Shaik-Fayaz786/AccuKnox-DVWA-Kubernetes

A local-first Burp Suite extension for bulk capturing, filtering, comparing, and exporting HTTP requests & paired responses into audit-ready evidence packs (HTML, Markdown, HAR, JSON, CSV)....

GhostLock: Android kernel root exploit for Vivo X100 Ultra (PD2366) via CVE-2026-43499 PI-futex race. KernelSU integration with vr.ko anti-root bypass. - Romk-a/CVE-2026-43499-ghostlock-vivo-x100-u...

Penetration test white-box su un’app Laravel: analisi Cyber Kill Chain, RCE via file upload bypass (CVE-2025-27515), exfiltration e remediation. - Shanks2001/Progetto-sicurezza

Guard-railed technical SEO audits of your own website with Claude Code: SSRF-safe fetcher, read-only SQL guard, supervised Screaming Frog crawls, export redaction. - SameerKhan/site-audit-kit

❄️ Static, serverless CVE radar — every new CVE from the last 30 days, ranked by real-world risk (KEV · EPSS · PoC · Metasploit · Nuclei · SSVC). SHA-256 verified, refreshed every 6h. By @RootAcces...

CVE-2026-105105 - NASA-AMMOS AIT-Core unauthenticated ZeroMQ command/telemetry bus (CWE-306, CVSS 9.8). Responsible scanner + loopback-only lab PoC. - Mothra-1/CVE-2026-105105

Heuristic-powered subdomain & vulnerability scanner in Rust (defensive recon only) - gilangrahmanda212-lang/Subdox

一加16提权越狱 · OnePlus 16 (PYB110) 临时 root / KernelSU-Next LKM | 作者：星苒鸭 - xingranya/OnePlus16-Jailbreak

A SOCKS5 proxy for Cobalt Strike that runs the listener on the operator workstation and routes every connection through the Beacon C2 channel using BOF tasks. No CreateThread, CreateProcess, fork&a...

Penerapan Pertahanan Berlapis (Defense-in-Depth): Melindungi Agen AI dari Prompt Injection, Kebocoran Data (DLP), dan Remote Code Execution (RCE). - muryanawaludin/agentic_secure_sandbox

Rust HTTP vulnerability scanning workbench with visual task planning, multi-step PoC authoring and a dashboard. - zihaoc689-maker/rust_nuclei

PoC For CVE-2026-52856. Contribute to lisbickq/CVE-2026-52856-PoC development by creating an account on GitHub.

fastjson 1.2.83 AutoType ?? / JNDI jar ??????(CVE-2026-16723 ????)- ASM ????? @JSONType ???? - cuttlefish520/FastJson1.2.83-GenProbe2

Passive C2 and exfiltration detection for packet captures (Go) - hxhBrofessor/c2parser