A comprehensive cybersecurity project focused on writing, testing, and deploying custom YARA rules for malware detection and threat analysis, complete with detection reports and performance metrics...

A number of exploits and tools I've written for CVEs accredited to Marshall Whittaker/oxagast - oxasploits/oxasploits

Uptime monitor and status page with AI incident triae, written in Go. HTTP, DNS and TLS checks, PostgreSL, REST API, SSRF protection. - DonBlack-117/watchkeeper

**PHISHX · 影钩**（Shadow Hook）是一套面向安全团队的 **钓鱼邮件演练与安全意识培训** 系统：克隆登录页、模拟钓鱼邮件、发布到公网、捕获「上钩」凭据、统计打开/点击/提交/举报等行为，最终生成可视化报表，用于衡量员工的安全意识水平。 - JonasTao/PHISHX

Security Requirements Document (SRD) and Security Response Plan (SRP) for DOM-based XSS vulnerability on OWASP Juice Shop. Mapped to ISO/IEC 27001 & NIST CSF - ferraridean7/owasp-juiceshop-dom-xss

HDU Information Security Lab 1: secure Flask REST API (JWT, bcrypt, SQLi/XSS protection) with SAST/SCA in GitHub Actions - Yute-Tjr/IS_Work1

现代 iOS 纵深防御体系系列研究笔记：SPTM/TXM/Exclaves 架构、沙箱逃逸攻防、Coruna 与 DarkSword 漏洞链、WebKit 到内核提权、OTA 固件更新安全、后台驻留与持久化检测。 - ramseyg340488/ios-security-research

YARA, network rules and a read-only Windows triage script for the freight-lure Node.js RAT and its BSC dead drop (GOOSE 20261020) - darkfibr/freight-rat-detections

Mercury unauth RCE combo: CVE-2026-111058 (kernels) + CVE-2026-111057 (terminals). By 0xNuts (@ExDev994). Authorized testing only. - ExDev994/CVE-2026-111058-CVE-2026-111057-mercury-rce

渗透测试不是扫清单，而是不断改变判断。灵眼是 DeepSeek Harness 的授权安全测试模式：探索图记录信念，证据约束结论，侦察、利用、复测与报告连成可复核的一条链。MIT。 - guaidao2/dsh-lingeye

Burp-style intercept (edit / forward / drop), HTTP history and repeater for testing your own web apps. - user-github-me/interceptor

Contribute to ZeroDayEvil/CVE-2026-50416-writeup-and-PoC development by creating an account on GitHub.

Security Researcher | Exploit Developer | PoC to Working Exploit - ponzidon/ponzidon

云安全中心收费吗：基础版免费0元，各版本价格、功能差别和4种容易多扣钱的情况. Contribute to acj67988/bit-content development by creating an account on GitHub.

NexShield is an AI-driven cybersecurity dashboard that automates network reconnaissance, identifies vulnerabilities across 27+ sensitive services, maps findings to MITRE ATT&CK techniques, ...

Reproducible lab for three Drupal core advisories affecting 11.4.9 (fixed in 11.4.10): SA-CORE-2026-014 RCE in field_ui, SA-CORE-2026-015 stored XSS in link, SA-CORE-2026-016 stored XSS in navigati...

Maintained by the ANY.RUN team, this repository provides YARA rules to help detect and classify various malware families and other malicious artifacts. - anyrun/YARA

CVE-2026-99999 Educational Analysis — Linux kernel csum_start validation bug, Guest-to-Host memory leak (CVSS 9.3). Attack chain simulation, no real exploit. - 01luyicheng/CVE-2026-99999-analysis

Sentinel is a Python-based vulnerability scanner that detects open ports, identifies software versions, checks HTTP security headers, performs basic CVE lookups using the NVD, and generates TXT and...

Isolated Active Directory attack lab: a purpose-built Windows domain with deliberate misconfigurations, attacked end-to-end — recon, credential attacks, RBCD, ADCS/ESC1, Sliver C2, persistence, DCS...