OpenAsy DAST agent: runs Nuclei and ZAP inside your network, only against targets proven to be yours, and sends the findings to dast. - openasy/dast-agent

Adversary Emulation Framework. Contribute to ACRT-EVAL/sliver-329-cr11 development by creating an account on GitHub.

Adversary Emulation Framework. Contribute to ACRT-EVAL/sliver-329-cr10 development by creating an account on GitHub.

Standalone defensive checker project for Sharp/librsvg CVE-2026-96889. One exploit per repository; evidence-based assessment without exploit payloads. - completetech-security/sharp-rsvg-rce-check

A Python-based Web Vulnerability Scanner developed as an individual B.Tech CSE academic project. It includes security checks for web application headers, cookies, input reflection, and database err...

Root RCE via authenticated OS command injection in the TP-Link Archer AXE300 ISP Speed Test (spdt_server -> sys.fork_call). Firmware 1.0.11. CWE-78, CVSS 8.5. - vindeckyy/tp-link-archer-axe3...

Standalone defensive checker project for CVE-2026-102258: SonicWall SMA1000 (6210, 7210, 8200v): AMC stored cross-site scripting. One exploit per repository; implementation pending. - completetech-...

Standalone defensive checker project for CVE-2026-102257: SonicWall SMA1000 (6210, 7210, 8200v): AMC archive path traversal. One exploit per repository; implementation pending. - completetech-secur...

Assemblyline 4 service that analyzes .NET and native binaries with Corvus: container contents, YARA matches, .NET and Il2Cpp outlines. - Albasha0x0/assemblyline-service-corvus

Lab logbooks for FSI (Fundamentos de Segurança Informática) @ FEUP, 3rd year. Covers Set-UID, buffer overflow, format string, XSS, crypto, hash length extension, PKI and packet sniffing/spoofing, m...

OSC is a Python web-security tool for authorized testing. A single scan covers secret detection (API keys, tokens, credentials), security audit (headers, CORS, TLS, cookies), endpoint discovery, an...

CVE-2026-111497 – Node.js Brotli Decoder OOB Write (CVSS 9.2) | Red/Blue Team suite for unpatched Node.js 22.x, 24.x, 26.x. 2 tools: Full Exploit (patch detection, remote DoS, Brotli bomb, lab RCE)...

FastAPI Network Vulnerability Scanner with Nmap & CVE Lookup - unidark001/network-vulnerability-scanner

Offline evidence checker for NetScaler CVE-2026-88771. Edition-aware firmware assessment, separate threat metadata, standalone Python, no exploit payloads. - completetech-security/netscaler-cve-202...

Standalone defensive checker project for Tinypool CVE-2026-104849. One exploit per repository; implementation pending. - completetech-security/tinypool-options-rce-check

Standalone defensive checker project for CVE-2026-102826: simple-git configuration include command injection. One exploit per repository; implementation pending. - completetech-security/simplegit-r...

Contribute to Ghost-Bx1/Node2Shell-CVE-2026-111497 development by creating an account on GitHub.

Offline evidence checker for NetScaler DTLS CVE-2026-88772. Per-vserver configuration and firmware assessment; standalone Python; no exploit payloads. - CompleTetech-Security/netscaler-cve-2026-887...

Contribute to ammarsabit/C2-Beacon-Detector development by creating an account on GitHub.

Javalanche is a Command & Control (C2) developed by James Southcott and Danny Nichols for the RITSEC Red Team, meant to be used in Red Vs. Blue style Cybersecurity Competitions for educatio...

Safe PoC and disclosure evidence for TypeMill stored XSS via SVG XML stylesheet processing - capivara-research/GHSA-994f-577q-hhph