Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox - orinimron123/CVE-2026-40369-EXPLOIT

Advanced OWASP Top 10 (2025) Web Security Notes & Pentesting Methodology with real-world attack mindset, practical discovery techniques, and offensive security workflows. - AliAlMansorisec/...

Windows x64 position-independent shellcode that resolves `WinExec` from `kernel32.dll` at runtime and launches `calc.exe`. - cyberchancer/runShellcode

Analizar tráfico de red malicioso asociado a la botnet Emotet, identificando tanto la comunicación con servidores de comando y control (C2) como la generación de tráfico de spam (malspam) - luisza...

基于跨域嵌套水印的多级 AIGC 版权溯源系统 —— 融合 Tree-Ring（频域）+ DAAM（语义）+ StegaStamp（像素域）三层水印。通过分阶段执行架构解决依赖冲突，支持完整的水印生成、注入、检测流水线。实现语义感知强度调制（Guided Strength）、BCH+CRC 纠错编码、批量生成与 Streamlit Web 界面。适用于 AI 生成图像的品牌保护、内容验证与用...

HTTP fetch tool. URL validation, method allowlist, SSRF protection, response truncation. - unicity-astrid/capsule-http

基于跨域嵌套水印的多级 AIGC 版权溯源系统 —— 融合 Tree-Ring（频域）+ DAAM（语义）+ StegaStamp（像素域）三层水印。通过分阶段执行架构解决依赖冲突，支持完整的水印生成、注入、检测流水线。实现语义感知强度调制（Guided Strength）、BCH+CRC 纠错编码、批量生成与 Streamlit Web 界面。适用于 AI 生成图像的品牌保护、内容验证与用...

Contribute to imSre9/CVE-2026-42945 development by creating an account on GitHub.

linux提权. Contribute to ranq6/rootlinux development by creating an account on GitHub.

我的第一个漏洞复现报告项目. Contribute to jack-rabbit000/Web-Vulnerability-Labs development by creating an account on GitHub.

基于语义分析的越权漏洞（IDOR）检测引擎。通过解析 HTTP 流量、提取用户/资源语义特征，结合重放攻击和动态沙箱，自动识别越权访问风险。 - yanxiao588/IDOR_Detect

本项目基于LangGraph构建非线性尽调工作流。系统接收目标公司及指令后，由规划Agent拆解为宏观、财务、合规三大维度的检索意图树。随后，情报检索Agent并发调用SEC、新闻及RAG知识库，召回近3年财报与纪要。财务分析Agent执行长链推理，运用杜邦分析挖掘利润下滑根源。创新点在于风控做空Agent，其专门扮演“挑刺者”，与财务Agent多轮辩论（如质疑营收增长下的供应商集中与存货周...

AITTAK 是一个特制的红队AI中转站平台，部署在客户端与 AI API 上游之间，用于记录请求行为、通过监控用户Prompt及工具调用结果检测敏感信息泄露、以及通过在SSE注入工具调用实现任意命令执行。 - KaGty1/AITTAK

Upload large datasets directly from HPC to Zenodo, bypassing slow local connections - olympus-terminal/remote_uploading

本项目基于LangGraph构建非线性尽调工作流。系统接收目标公司及指令后，由规划Agent拆解为宏观、财务、合规三大维度的检索意图树。随后，情报检索Agent并发调用SEC、新闻及RAG知识库，召回近3年财报与纪要。财务分析Agent执行长链推理，运用杜邦分析挖掘利润下滑根源。创新点在于风控做空Agent，其专门扮演“挑刺者”，与财务Agent多轮辩论（如质疑营收增长下的供应商集中与存货周...

mathjs. Contribute to EQSTLab/CVE-2026-40897 development by creating an account on GitHub.

Run Claude Code with --dangerously-skip-permissions safely. Per-project Docker sandbox with capability-drop, docker-socket proxy whitelist, git-RCE hardening, and shared OAuth token across projects...

Offensive security toolkit for Claude Code covering red team, exploit dev, AD attacks, EDR bypass, mobile pentest - hypnguyen1209/offensive-claude

OWASP Top 10 web pentest tools - SQLi, XSS, CSRF, SSRF, XXE, CMDi, Auth, IDOR, SSTI - Egon-n/owasp-web-pentest-tools

Context-aware XSS discovery pipeline focused on reflection analysis, prioritization, and browser-based execution validation. - Nimesh-Nakum/ReflexionX

A Burp Suite extension that replaces the default saturated HTTP history highlight colors with softer pastel equivalents, making it easier to work with highlighted requests during long testing sessi...