Pegasus Spyware — Threat intelligence and malware analysis report including MITRE ATT&CK mapping, Indicators of Compromise (IOCs), exploit chains, YARA detection rules, campaign tracking, a...

React Server Components Module Loader - Global Module.prototype._compile Patch Leading to RCE - devsamuelsantiago/rs-module-loader-poc

React Server Components Module Loader - Global Module.prototype._compile Patch Leading to RCE - devsamuelsantiago/rsc-module-loader-poc

A Kubernetes CSI driver that provides LUKS encryption on top of local storage, similar to rancher.io/local-path but with built-in encryption capabilities. - Algonomia/lukscryptwalker-csi

Contribute to frudotz/ISU-SecOps-Nginx-RCE development by creating an account on GitHub.

Stored Cross-Site Scripting (XSS) in Glamour Salon Management System - Kiezroy/XSS-Disclosure-Glamour-Salon

FlowScan 是一个基于事件驱动架构的自动化安全扫描编排引擎，通过 YAML 配置模块实现灵活的漏洞扫描、资产发现和服务识别。支持多目标并发处理、智能事件路由和自动化工作流编排。 - paokuwansui/FlowScan

Manage DLC flags, console commands, and game configuration files for The Witcher 3 without needing a launcher. - Pastelike-corn361/The-Witcher-3-DLC-Unlocker-Manual-Scripts-Config-Editors-No-Launcher-

Privacy-respecting CVE lookup: PoC presence and active-exploitation evidence - leocybersecapps/cve-threat-lookup

Production-grade Sliver C2 infrastructure: one-click FUD implant, always-on Cloudflare Worker redirector, Defender evasion, cross-device failover - pantha704/sliver-c2

Burp Suite extension for one-click reconnaissance and reporting - lubiku35/analyze-target-burp-plugin

BeaconatorC2 is a framework for red teaming and adversarial emulation, providing a full-featured management interface, along with a catalog of beacons and a clear schema to add more beacons over ti...

CP 3 :: Web XPL :: SSTI. Contribute to sergio-echigo/xpl_cp3 development by creating an account on GitHub.

Python exploit toolkit for WordPress Crop Image RCE — CVE-2019-8942 & CVE-2019-8943 - SpeatX/Wordpress-Crop-RCE

🔍 Analyze and exploit cross-function reentrancy vulnerabilities in smart contracts to enhance security and prevent critical risks. - lizxyyyc/sc-reentrancy-attack

Android security research — C2 architecture, threat modelling, and defensive analysis. Final Year Project. Documentation only. - 46894-RAFFEY/androspectra-RAT-research

Known C2 infrastructure, mapped and watched — open data for defenders. - doodad-labs/command-server-watch

Roundcube RCE. Contribute to roundcube-utils/roundcube-rce development by creating an account on GitHub.

Cent Nuclei Templates generated through the cent tool. Maintained by HackerWhite. - srkgupta/cent-nuclei-templates

Selected public vulnerability research, CVE writeups, SSRF/parser bypasses, and AppSec findings. - b-hermes/vulnerability-research

Portable Python PoC for CVE-2026-31431 (Copy Fail) - wh1sky02/copy-fail-python