CVE-2026-39987 Exploitation Tool - Marimo < 0.23.0 Pre-Auth RCE (WebSocket) - M3PH1569/CVE-2026-39987-POC

Some Yara Rules . Contribute to DERE-ad2001/Yara development by creating an account on GitHub.

Scan and exploit WordPress vulnerabilities to identify and patch security weaknesses during authorized penetration tests. - Eastside-georgia30/Mephisto

Teardown of a Go-compiled ransomware family that uses repeating-key XOR instead of AES and writes its own decryption key to disk before encrypting. Includes a working free decryptor, YARA rules, ne...

Cloud-native threat hunting case study using Splunk Cloud to detect MITRE ATT&CK T1003.001 (LSASS Memory Dumping). Features custom SPL and runtime regex (rex) log parsing of raw Sysmon tele...

MESSAGING — umbrella multi-canal BR (email + SMS + push + WhatsApp + Telegram interno). Consolida ex-rewire-notify + ex-rewire-beacon (ADR 0108 C2). - Rewire-labs/rewire-messaging

📧 Create and send emails easily with PHPMailer, a powerful PHP class packed with features for reliable email delivery and customization. - Mr-Anonym/PHPMailer

Polymorphic AV/AMSI bypass toolkit - Donut shellcode runner for offensive .NET/PE tools - p3ta00/killshot

app for Upsilon Sigma Phi. Contribute to aejorango/upsilon-app development by creating an account on GitHub.

First public reverse engineering of GAMYBEAR, the Go backdoor used by UAC-0241 against Ukrainian education and state-authority targets. Static + dynamic analysis with 15 findings extending CERT-UA#...

Hands-on offensive engineering and defensive mitigation of core security vulnerabilities—covering Cryptography, Stack Overflows, XSS/CSP, SQLi, and TCP/IP MITM attacks—implemented within a containe...

PowerShell-based Blue Team monitoring project for Windows event analysis, suspicious activity detection, automated alerts, logging, and security report generation. - Tenorio04/BlueTeam-Monitor

CVE-2026-36239: Authenticated RCE in PbootCMS v3.2.12 backend (sitecopyright) - TazmiDev/CVE-2026-36239

A Burp Suite extension that seamlessly intercepts, decrypts, and re-encrypts AES-encrypted JSON payloads on the fly. - Re4lLife/AES-JSON-Native-Editor---Burp-Suite-Extension

ESLint-style linter for Sigma detection rules. Validates against Sigma 2.1.0, scores rules across six quality dimensions, emits stable rule IDs. - ni5h4nt/sigmalint

Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration tests and vulnerability assessments too. - edoardottt/missing-cv...

Contribute to Bitcoin12124/CVE-2026-X4992-Uniswap-PoC development by creating an account on GitHub.

SafeCadence Network Risk — local-first infrastructure + identity policy platform. 45 adapters (40 infra + 5 identity), 22 controls, 16 multi-vendor translators, capability-based RBAC, AI policy int...

RBAC Atlas is a curated database of identities and the Role Based Access Control (RBAC) policies associated with them in popular Kubernetes open-source projects. - Alevsk/rbac-atlas

Tomcat AJP文件读取/包含漏洞. Contribute to duckpigdog/Tomcat-AJP-CVE-2020-1938 development by creating an account on GitHub.

POC for xxl-job SSRF vulnerability. Contribute to RichardKabuto/xxl-job-ssrf-poc development by creating an account on GitHub.