Open-source exploit/malware scanner + firewall-integration layer for Linux web hosting - drop-in replacement for cxs (ConfigServer eXploit Scanner) - mrpc/OpenXS

Repeatable Google SecOps Proof of Value (PoV) kit & interactive WIF/IdP provisioning portal. Includes Cloud Console UI, gcloud CLI, REST API, and Terraform automation for Workforce Identity...

PoC for CVE-2026-54668 — XXE injection in Kitodo.Production (< 3.9.2) XMLUtils. Default-configured JAXP parsers on the EAD-import path resolve external entities: local file disclosure + SSRF...

A Python CLI tool to audit and bypass OTP/SMS rate limits using distributed proxy IP rotation - khdertaysh1/otp-rate-limit-bypass

Standalone defensive checker project for CVE-2026-17106: Docker copy destination escape. One exploit per repository; implementation pending. - CompleteTech-LLC/copyescape-check

Standalone defensive checker project for CVE-2026-105445: Docker Hub account-conversion PAT reassignment. One exploit per repository; implementation pending. - CompleteTech-LLC/docker-hub-pat-check

PowerShell malware triage for Windows: persistence, YARA, Defender, and threat-intel lookups. - notiren/check-malware

Standalone defensive checker project for CVE-2026-104935: Ivanti Connect Secure: Authentication bypass by spoofing. One exploit per repository; implementation pending. - CompleteTech-LLC/ivanti-con...

Beginner Python web vulnerability scanner with simple checks for SQL injection, reflected XSS and missing CSRF tokens. - Kahelm621/SentryScan

Standalone defensive checker project for Tinypool CVE-2026-104849. One exploit per repository; implementation pending. - CompleteTech-LLC/tinypool-options-rce-check

Standalone defensive checker project for CVE-2026-102826: simple-git configuration include command injection. One exploit per repository; implementation pending. - CompleteTech-LLC/simplegit-rce-check

Standalone defensive checker project for CVE-2026-104286: Fortinet FortiMail: Path traversal / NULL-byte arbitrary file write. One exploit per repository; implementation pending. - CompleteTech-LLC...

Standalone defensive checker project for Sharp/librsvg CVE-2026-96889. One exploit per repository; evidence-based assessment without exploit payloads. - CompleteTech-LLC/sharp-rsvg-rce-check

CVE-2026-102785 YOOtheme Pro 5.0.0-5.0.52 │ Unauthenticated RCE Mass Exploit & WAF Bypass - antid00t/CVE-2026-102785

Contribute to lesterlam/onigmo-cve-2026-110264 development by creating an account on GitHub.

Build a YARA rule to detect a sample that uses sandbox/VM evasion, on disk and in memory - jeremyt12345/Yara-Rules-Detection

YARA-based malware scanner with Wazuh/Shuffle integration, ML detection, and HTML reports - InfraSecID/yaracop

CyberSci Defence CTF 101 lab: remediation of SQL injection, broken access control, JWT forgery, and stored XSS, with validation evidence - harshs4711/cybersci-defence-ctf-lab

Standalone defensive checker project for CVE-2026-56846: Node.js: HTTP/2 retained header memory exhaustion. One exploit per repository; implementation pending. - CompleteTech-LLC/node-cve-2026-5684...

Offline evidence checker for NetScaler CVE-2026-88771. Edition-aware firmware assessment, separate threat metadata, standalone Python, no exploit payloads. - CompleteTech-LLC/netscaler-cve-2026-887...

regex2shell (CVE-2026-110264 + family) — GitLab/Onigmo unauth regex RCE research: safe differential detector, deterministic interpreter kill, match-time write primitive - FranklinF25/regex2shell