Contribute to sudo5Q/CVE-2026-38056-PoC development by creating an account on GitHub.

PenSkills 是一个开源项目,收录一系列面向 Claude / AI Agent 设计的"技能模块"(Skills),用于辅助渗透测试、CTF 靶场演练与安全研究工作流程。每个技能封装了特定场景下的方法论、checklist 与标准化操作流程,帮助安全从业者在授权范围内更高效地完成信息收集、漏洞分析、报告撰写等环节 - Aevon-sec/PenSkills

Static malware triage for SOC analysts. Never runs the sample. - aeonstwilight/unopened

GBT V8 capability #274/341 · scan_cap (system) — **统一扫描位**（蒸馏 20 个星标最高、原理各异的开源扫描器：Trivy/Grype/OSV · Semgrep/CodeQL/Bandit ·gitleaks/TruffleHog · nuclei/ZAP · Syft · Checkov/tfsec/kube-linter/kube-b...

GBT V8 capability #235/341 · sec_scan (security) — 黑客大脑：漏洞扫描（OWASP Top 10 + CWE 模式库，扫描自有代码） | contract + validation + CLI, 0 runtime deps. - gbtweilai-star/gbt-sec-scan

GBT V8 capability #232/341 · sec_chain (security) — 黑客大脑：利用链构建（从漏洞清单推演攻击路径+影响评估） | contract + validation + CLI, 0 runtime deps. - gbtweilai-star/gbt-sec-chain

Burp Extension to fetch and analyze javascript files on the web - rin4th/js-analyzer

Contribute to sumantsapra/POC_ao-exchange development by creating an account on GitHub.

生产级 MCP 工具服务 + 调度网关：6 个业务 MCP 工具，API Key 鉴权、权限分级、Redis 限流、异步审计、越权防护与 Prometheus 指标 - DamienZCollins/MCPort

通过CNNVD官方API批量获取XML格式漏洞信息. Contribute to babyshen/CNNVD-vulns-collect development by creating an account on GitHub.

calibrated php2shell payloads for common docker images - lflare/php2shell-cve-2026-109618-109619

Detection-only triage scanner for MLflow scorer RCE CVE-2026-116692: version check via the /version endpoint. No payloads, no scorer invocation. - foxcornlab/mlflow-scorer-scanner

Clean-room web security testing suite in Rust: intercepting HTTPS proxy, Repeater, Intruder, JWT tools, bundled Chromium, projects, and an addon system that runs Burp BApps (Java + Python) alongsid...

cve-2026-43499 exploit on vivo's MT6896 device PD2238. - Syerain/cve-2026-43499-mt6896-pd2238

CVE-2026-98260: Xiaomi 17 Ultra (nezha) temporary root + KernelSU PoC - scripts, docs and logs only; exploit built from upstream source - 4627488/cve-2026-98260-nezha

php2shell漏洞利用脚本. Contribute to colebishsj937/php2shell development by creating an account on GitHub.

iOS 系统安全研究报告集：漏洞链、内核提权、WebKit 与沙箱防御分析. Contribute to reeseq310612/ios-security-reports development by creating an account on GitHub.

Static and dynamic analysis of two Windows trojans: IOCs, YARA detection rules and clean-up steps - chandumal-udagedara/malware-analysis-windows-trojans

Read-only Python CLI vulnerability scanner for authorised localhost web security labs. - VarshithkumarG/lightweight-vuln-scanner

Curated high-confidence IOC feed (IP, domain, URL, file hashes), 0-100 scored, every 2h. Ready-to-import for Palo Alto, FortiGate, Check Point, Cisco, Defender, CrowdStrike, SentinelOne, Splunk, Se...