Python-based dependency vulnerability scanner using the OSV API - farhadabbasiamiri/python-sbom-agent

FiberHome HG6145F (RP4357): unauthenticated root shell PoC — triger_speedtest RCE, no admin password needed - 0xDev000/hg6145f-poc

CVE-2026-114550 / ZDI-CAN-31039: libwebsockets MQTT PUBACK OOB write PoC lab (podman) - googlesky/CVE-2026-114550

Client tools for Prego: Cargo and Docker credential helpers and the prego CLI (Apache-2.0) - group-katskill/prego-clients

Active Directory credential-test orchestrator built on impacket — secretsdump, Kerberoasting, AS-REP roasting, pass-the-hash execution validation, NTLM relay testing, LDAP/SID enumeration, DPAPI ex...

Proyecto final Seguridad de Software - IDOR y SSRF en DVRestaurant - ivan032005/damn-vulnerable-restaurant-idor-ssrf

Contribute to devnxh/PE-Sentinel development by creating an account on GitHub.

CIE 2026 香山昆明湖 V2 vdot 自定义指令项目（全栈漏洞队）. Contribute to Andrew111888/cie2026-quanzhan-loudong-dui-xiangshan-vdot development by creating an account on GitHub.

DingLiu网安 · AI自动化挖漏洞（仅限授权目标的AI辅助漏洞扫描框架）. Contribute to CG794899/dingliu-ai-vulnscan development by creating an account on GitHub.

PiX — 假设驱动、自带渗透工具箱的自主渗透测试 Agent 发行版（Hypothesis-Driven Pentest Agent for Pi Framework） - xsec777/PiX-Agent

CVE-2017-18349漏洞环境与PoC. Contribute to dichen-L/CVE-2017-18349-fastjson1.2.24-vul development by creating an account on GitHub.

Flask + SocketIO web platform for hardware security assessments — create device/interface projects, orchestrate Gearbox in real-time, collect and parse evidence from 30+ tools (Nessus, Nmap, sslsca...

SSRF-safe fetch for Node.js: blocks private and metadata addresses, pins the socket against DNS rebinding, re-checks every redirect, caps time and size. - gydr-ai/safe-fetch

Contribute to TheMaximuzz/DOM-XSS-Sinks-Cheat-Sheet development by creating an account on GitHub.

Synthetic multi-stage APT investigation using Elasticsearch, Kibana, YARA and Sigma - CharanGoud69/task6-multistage-apt-soc-lab

Windows endpoint threat investigations covering DLL hijacking, PowerShell abuse, LSASS credential dumping, suspicious process relationships, and detection logic. - donmal/Windows-Endpoint-Threat-De...

22 YARA detection rules for Cobalt Strike loaders, beacons, and post-exploit artifacts. Covers versions 3.x–4.x. - struttonpigeon/cobaltstrike-yara

Telegram bot for downloading video, audio, images and albums from 1800+ sites: yt-dlp + gallery-dl + FFmpeg, real per-source quality selection, SSRF-guarded, 258 tests. - Steve6546/telegram-media-g...

Plain-language nuclei — the scanner that runs checks written as small YAML templates, installing the engine and its template collection, a first scan against a lab server you control, reading and w...