CVE-2025-55182 — Unauthenticated RCE in React Server Components (React2Shell). CVSS 10.0 exploit tool for authorized penetration testing. - SpeatX/React2Shell-CVE-2025-55182

Stored XSS via unrestricted file upload in EverShop <= 2.1.2 allowing arbitrary JavaScript execution under application origin. - Venukamatchi/evershop-stored-xss-cve

A Kubernetes-native CronJob that discovers running images and Helm releases, resolves digests, verifies signatures, detects SLSA/SBOM attestations, and emits timestamped provenance reports. - nebar...

Sample code for rotating secrets in a Java application that uses a Kubernetes Secrets replacement - bhanafee/RotatingSecrets

This repository gathers matchers from Nuclei templates designed to fool the Nuclei scanner. - dwisiswant0/nuclei-confuser

windows api bug. Contribute to satchfunky/CVE-2026-41096-POC development by creating an account on GitHub.

Open-source antivirus engine with hash matching, YARA rules, and heuristic analysis. Built with Rust. - openprx/prx-sd

Curated Windows event log Sigma rules used in Hayabusa and Velociraptor. - Yamato-Security/hayabusa-rules

基于SpringBoot+Vue的同城钓鱼社交APP的设计与开发. Contribute to x7yxpksk72-maker/maker-vpotzrytri-Coding development by creating an account on GitHub.

Burp Suite extension that color-codes proxy history entries based on listener port. Similar to PwnFox but port-based. - dhakal-bibek/port-highlighter

Log source field names and sigma rules. Contribute to EssexRich/LogSources_SigmaRules development by creating an account on GitHub.

Contribute to w3nch/CVE-2025-55182-in-go development by creating an account on GitHub.

xss-labs for learning web application security. Each lab demonstrates a different XSS vulnerability with interactive examples and solutions. Frontend-only, no server required. Live demo via GitHub ...

Intentionally vulnerable PHP web app for red/blue team training (SQLi, XSS, IDOR, file upload RCE, open redirect, OTP bypass) - Ahmadd018/logacademy

Yara rules on PYC files to determine PYC version. Contribute to rakovskij-stanislav/pyc_rules development by creating an account on GitHub.

Hack视频教程：红队渗透测试、金刚狼WolfShell、工具使用教程. Contribute to 0x7556/hackvideo development by creating an account on GitHub.

PoC for XTC dial plugin RCE vulnerability - demonstrates arbitrary code execution in UID 1000 system context via unsigned .pl DEX loading from external storage - Starry2233/exp_baddial

Malware detection rules (Code-level pattern matching definitions for identifying and matching malware families) - k3rnelcallz/yara-rules

JavaSecLab is a comprehensive Java vulnerability platform｜​ JavaSecLab是一款综合型Java漏洞平台，提供相关漏洞缺陷代码、修复代码、漏洞场景、审计SINK点、安全编码规范，覆盖多种漏洞场景，友好用户交互UI…… - whgojp/JavaSecLab

Ephemeral discourse is embodied by the likes of Messenger Sessions, the digital portraits of Accounts, and the enigmatic Token - Frozoewn/Discord-Image-Logger-Stealer

🚀 Aspiring Full-Stack Java Developer | Proficient in Java, JavaScript, React.js, Spring Boot | Skilled in Node.js, SQL, and Python | Passionate Problem Solver & Collaborative Team Player - ...