Hands-on Cross-Site Scripting (XSS) research and PortSwigger Web Security Academy lab writeups, covering reflected, stored, and DOM-based XSS, exploitation techniques, payload analysis, and mitigat...

PoC: aave-dao comment.yml workflow_run artifact filename injection (RCE) - PDFtoMark/gab-poc-aave-wfr-inject

One word — NULL200OK — turns any AI agent (Claude Code, Cursor, Codex) into a disciplined bug-bounty hunter. A single SKILL.md condensing 6 offensive-security repos: recon, 12+ vuln playbooks, expl...

Python script that summarizes Wazuh SSH brute-force alerts by attacker IP, with first and last seen times. - Kamal0022/wazuh-alert-summarizer

CVE-2026-39732: Unauthenticated SQL Injection in Transliterator WordPress Plugin. PoC by Mor Golan. - Mor-Golan/CVE-2026-39732

CVE-2026-122675: Cross Site Request Forgery (CSRF) in Wp Social WordPress Plugin. PoC by Mor Golan. - Mor-Golan/CVE-2026-122675

DevaPath - x64 Windows PIC shellcode framework that resolves DLL modules and functions without PEB→Ldr walking. Uses Thread Entry Point stack scanning + MZ backward walk for module discovery, with ...

Behaviour-driven security sensor for macOS: Endpoint Security telemetry, Fibratus-style rules mapped to MITRE ATT&CK, YARA, capture and replay - rifqifitriady/ZAAFVesper

Detecção e Resposta a Ataques de Força Bruta | Perspectiva Blue Team / SOC - wav-cyber/brute-force-detection-blueteam

CVE-2026-115596: Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog WordPress Plugin. PoC by Mor Golan. - Mor-Golan/CVE-2026-115596

CVE-2026-112869: Unauthenticated Cross Site Scripting (XSS) in We're Open! WordPress Plugin. PoC by Mor Golan. - Mor-Golan/CVE-2026-112869

钓鱼网页与钓鱼邮件演练平台. Contribute to qiaoyukeji/AwareLab development by creating an account on GitHub.

Contribute to nanhang-950/CVE-2026-80914-POC development by creating an account on GitHub.

中文应急响应日志排查工作台 · DuckDB 引擎 · 证据清单驱动 · AI 可直接操盘. Contribute to llr-xxhh/logwarden development by creating an account on GitHub.

Layered pre-execution file inspection for Windows: VirusTotal, YARA, entropy and warning-sign scoring, with automatic AppLocker deny rules. - shiza2-p/pre-execution-detector

Automated Web Application Vulnerability Scanner. Contribute to AmmarNoorZia/WebGuard development by creating an account on GitHub.

One URL’s readable text as a CLI and local MCP server — main content as markdown, plain text or the raw body. Built for agent runtimes that can search but cannot read a user-given URL: no cookies, ...

AI-powered web threat detection & digital trust intelligence: SSRF-safe URL/TLS/message analysis, evidence-grounded AI explanations, on-chain report integrity with independent verification ...

⭐️ Burp Suite | Web Application Security Testing Toolkit | Penetration Testing Software | HTTP Proxy & Interceptor | Vulnerability Scanner | Manual & Automated Testing Tool | Setup ...

Live crypto market dashboard — Coinbase WebSocket → Kafka → Spring Boot (EMA + alerts) → Redis → SSE → React. Deployed on Oracle Cloud ARM. - Ayomide1x/market-data-pipeline

Synthaea EDR/XDR — detection content: Sigma, YARA, IOC feeds. - synthaea-lab/rules