Advanced Git Exposed Scanner with WAF Bypass capabilities - santhosh27rt/git-exposed-scanner

Educational Python tool that checks URL query parameters for reflected input using requests, BeautifulSoup and threading. Results require manual validation; use only on authorized targets. - farouk...

Educational Docker lab reproducing CVE-2023-30861 (Flask session cookie disclosure via missing Vary: Cookie), with exploit, patch verification and a full write-up - elisapresciutti/CVE-2023-30861-f...

Point-and-shoot live application forensics for Windows (DFIR): click any window and get a sealed forensic report about the process behind it. - horizonbymuneeb/liveappinspector

This article focuses on extracting and analyzing shellcode from a Cobalt Strike malware sample - nguyen-duy62g00n3r/Shellcode-Extraction-and-Analysis-of-a-Cobalt-Strike-Malware-Sample

dsh-purge 红队技能包，适配 NewAPI 技能商店格式。25 个技能：无限制模式/红队指挥/侦察/漏洞发现/利用/内网渗透/隧道。仅限授权攻防演练。 - moeacgx/newapi-redteam-skills

Companion malware scanner for Windows: YARA-X rules, real-time folder and USB watch, USB port inventory, camera and microphone monitoring. Works alongside Microsoft Defender. - ladiran/Bimbo_Guard_...

Companion malware scanner for Windows: YARA-X rules, real-time folder and USB watch, USB port inventory, camera and microphone monitoring. Works alongside Microsoft Defender. - bolajohn/Bimbo_Guard

Companion malware scanner for Windows: YARA-X rules, real-time folder and USB watch, USB port inventory, camera and microphone monitoring. Works alongside Microsoft Defender. - ladiran/Bimbo_Guard

RefleX is a high-performance concurrent security tool designed to detect reflected URL parameters and potential XSS vulnerabilities. It features case-insensitive matching, deep HTML context severit...

Foundry Proof-of-Concept (PoC) exploits and security analysis for smart contract vulnerabilities (Ethernaut, Solodit, Past Contests) - Dheeraj-2205/solidity-exploits-foundry

Motorola E32 Root Access exploit. Contribute to CreitinGameplays/motorola-moto-e32-root development by creating an account on GitHub.

Persistent UI Hijack & RCE for Vizio SmartCast (Chromium 72) (CVE Pending) - basil-squared/Castaway-Vizio

🚨 CVE ID: CVE-2026-116779 📦 Product: FreeSWITCH 💉 Type: Command Injection (via SIP MESSAGE) 🔥 Score: 9.8 (Critical(RCE)) +20K target - majidrahimi5020-lgtm/Poc-exploit-for-CVE-2026-116779-FreeSWITCH-

A CVE-2026-98260 PoC sourcecode for OPPO Pad Air 5 - cuteaplane/CVE-2026-98260-for-OPD2501

A hands-on SOC home lab integrating YARA with Wazuh SIEM to automate malware scanning, monitor file activity, and investigate security alerts on Ubuntu Linux. - mkhubab11/yara-wazuh-malware-detection

Contribute to str1keboo/CVE-2021-43798 development by creating an account on GitHub.

Argus — an all-seeing recon framework for bug bounty. Chains subdomain enumeration → HTTPX probing → nmap → URL crawling → candidate flaggers for SQLi, XSS, SSRF, SSTI & IDOR into one modul...

🛡️ Production-ready Backend Security Audit & Vulnerability Scanner: OWASP API Security, JWT inspector & DevSecOps tools - 29rdx/backend-security-sentinel

CVE-2026-105192 (LMCache): pre-auth pickle deserialization RCE over the unauth ZMQ transport (single frame) — b63 showcase, lab-verified with patched-build negative + reliability/matrix evidence - ...

php2shell 100% work DoS in Wordpress. CVE-2026-109618 and CVE-2026-10961 - al4n4n/php2shell