A tiny YARA-style rule engine in pure Python: rule parser, Aho-Corasick single-pass matching, hex/regex strings, secret & file-type rules - HisokaDrip/pyara

CVE-2026-109619 PoC lab. Contribute to Taz1920/cve-2026-109619 development by creating an account on GitHub.

Standalone defensive checker project for CVE-2026-102256: SonicWall SMA1000 (6210, 7210, 8200v): Authenticated remote code execution. One exploit per repository; implementation pending. - CompleteT...

Malware analysis case study: what Windows Defender flagged in an archive.org J2ME phone-game dump (static triage, VirusTotal enrichment, IOCs, YARA) - talls2/j2me-dump-malware-analysis

PHP 8.5.11 - Critical - Remote - UAF - CVE-2026-109619 PHP2Shell. Same-worker fatal backtrace then INI diagnostic on Apache mod_php. Lab vs 8.5.12. Advisory RCE inferred. - abraxas/php-stale-global...

PHP 8.4.26 - Critical - Remote - OOM longjmp - CVE-2026-109618 PHP2Shell. Unauth chunked multipart hits memory_limit before app code on Apache mod_php. Lab vs 8.4.27. Advisory RCE inferred. - abrax...

By combining CISA KEV (active weaponization signal), OSV.dev (ecosystem package-version boundary mapping), and deps.dev (reverse-dependency topological reach), this repository acts as an Action Dis...

Phishing awareness demo: fake QQ login page that reveals itself right after submit; records nothing. 钓鱼安全教育演示 - Principia-rain/phishing-demo

Research lab reproducing a target-specific Python Brotli 1.2.0 decoder RCE chain in Docker - ninj4c0d3r/python2shell

Contribute to Xiangmin-Li/my-poc-cve development by creating an account on GitHub.

Independent verification of CVE-2026-109618 / CVE-2026-109619 (private review copy) - JoshRob297/php2shell-research

CVE-2026-109618 & CVE-2026-109619 — PHP Pre-Auth RCE Exploit & Detection Toolkit - DARKSTUFF-LAB/php2shell-poc

Herramienta de diagnóstico de seguridad web en Python (checks pasivos OWASP y pruebas activas opt-in de XSS/SQLi/SSTI), con CLI e interfaz web, diseño anti-SSRF y 29 pruebas automatizadas. - MauExp...

Four months of MITRE rejections, retroactive SECURITY.md/CVE changes, CISA acknowledging CVE eligibility but refusing to act, and CERT/CC closing the case unresolved. The result: a second independe...

A Python-based automated vulnerability scanner for auditing defensive HTTP security headers and CORS misconfigurations against OWASP baselines. - Dhruv-9147/Web-Security-Auditor-Project-

CVE-2026-39987 POC Marimo. Contribute to lunacysoft/CVE-2026-39987-POC-Marimo development by creating an account on GitHub.

Modular Command & Control (C2) architecture implementing AES-256-GCM authenticated framing, multi-session management, and anti-sandbox heuristics. (Archived reference) - nhutnhd/modular-c2-...

This example demonstrates the core concept of a 'Pre-Authentication Remote Code Execution' (Pre-Auth RCE) vulnerability. It simulates a simple web server with an unauthenticated end...

Scalpel is a Burp extension for intercepting and rewriting HTTP traffic, either on the fly or in the Repeater using Python 3 scripts. - ambionics/scalpel

Standalone defensive checker project for CVE-2026-104286: Fortinet FortiMail: Path traversal / NULL-byte arbitrary file write. One exploit per repository; implementation pending. - completetech-sec...