First public reverse engineering of GAMYBEAR, the Go backdoor used by UAC-0241 against Ukrainian education and state-authority targets. Static + dynamic analysis with 15 findings extending CERT-UA#...

Hands-on offensive engineering and defensive mitigation of core security vulnerabilities—covering Cryptography, Stack Overflows, XSS/CSP, SQLi, and TCP/IP MITM attacks—implemented within a containe...

PowerShell-based Blue Team monitoring project for Windows event analysis, suspicious activity detection, automated alerts, logging, and security report generation. - Tenorio04/BlueTeam-Monitor

CVE-2026-36239: Authenticated RCE in PbootCMS v3.2.12 backend (sitecopyright) - TazmiDev/CVE-2026-36239

A Burp Suite extension that seamlessly intercepts, decrypts, and re-encrypts AES-encrypted JSON payloads on the fly. - Re4lLife/AES-JSON-Native-Editor---Burp-Suite-Extension

ESLint-style linter for Sigma detection rules. Validates against Sigma 2.1.0, scores rules across six quality dimensions, emits stable rule IDs. - ni5h4nt/sigmalint

Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration tests and vulnerability assessments too. - edoardottt/missing-cv...

Contribute to Bitcoin12124/CVE-2026-X4992-Uniswap-PoC development by creating an account on GitHub.

SafeCadence Network Risk — local-first infrastructure + identity policy platform. 45 adapters (40 infra + 5 identity), 22 controls, 16 multi-vendor translators, capability-based RBAC, AI policy int...

RBAC Atlas is a curated database of identities and the Role Based Access Control (RBAC) policies associated with them in popular Kubernetes open-source projects. - Alevsk/rbac-atlas

Tomcat AJP文件读取/包含漏洞. Contribute to duckpigdog/Tomcat-AJP-CVE-2020-1938 development by creating an account on GitHub.

POC for xxl-job SSRF vulnerability. Contribute to RichardKabuto/xxl-job-ssrf-poc development by creating an account on GitHub.

AI-Powered Phishing Detection Platform — Multi-engine URL analysis with heuristic scoring, content inspection, threat intelligence, and YARA-style detection rules. Single-file Python app with built...

OXIDE Framework v8.4.9 — AI-augmented web vulnerability scanner written in Rust. Features 15+ scanners (SQLi, XSS, LFI, CORS, TLS, creds, etc.), WAF bypass engine, ML-driven zero-day detection, Ins...

A PoC ( Proof of Concept ) of Local Privilege Escalation in Linux Kernel - wvverez/CVE-2026-31431-Copy-Fail

The curated list of modern bugs instead of those generic sqli or reflected xss. - saarthi03/hackatlas

binary exploitation toolkit. Contribute to manop55555/abcpwn development by creating an account on GitHub.

PoC: pull_request_target + non-functional environment gate = unauthenticated fork RCE + secret exfil + contents:write (mirrors storyprotocol/python-sdk) - tommyboyhacking/story-python-sdk-prt-poc

Proof-of-concept for CVE-2026-43494 (PinTheft): Linux LPE via RDS zerocopy refcount bug + io_uring fixed buffers → SUID page-cache overwrite. Authorized research only. - jayhutajulu1/CVE-2026-43494...

ziochub - An open-source IOC & YARA Management Platform - Zwerd/ziochub

Proof of Concept to test a sample REST native app. Contribute to tamamico/poc-spring-webflux-native development by creating an account on GitHub.