Critical and High web vulnerabilities monitoring. Contribute to zzzteph/low-hanging-vulns development by creating an account on GitHub.

a RAG for sigma Rules. Contribute to frack113/sigmahqrag development by creating an account on GitHub.

Open-source endpoint detection engine for Windows and Linux using ETW, eBPF, Sigma, YARA, IOCs, and ECS NDJSON alerts. - Karib0u/rustinel

AI 自动化渗透测试. Contribute to Zero16800/Zero-SecurityAgent development by creating an account on GitHub.

CVE-2026-33712 - Typebot <= 3.15.2 Unauthenticated SSRF via isolated-vm sandbox fetch - portbuster1337/CVE-2026-33712

copy_fail:CVE-2026-31431. Contribute to Iamliuxiaozhen/copy_fail development by creating an account on GitHub.

PenTesShield 是一个基于多Agent协作架构的渗透测试报告自动化生成平台，通过四个专业Agent（ReconAgent信息收集、VulnScannerAgent漏洞扫描、ExploitAgent验证利用、ReportGeneratorAgent报告生成）按优先级顺序协同工作，结合长链推理能力记录完整的分析决策过程，自动化完成从目标发现、漏洞识别、风险评估到报告输出的全流程，有效解...

100% offline, single HTML file static analyser for SOC / DFIR triage — 70+ file formats, 1 Million row EVTX / PCAP / CSV timeline, 550+ YARA rules, VBA macro extraction, PE / ELF / Mach-O capabilit...

AI driven Command and Control for AI agents. Contribute to philcali/c2.ai development by creating an account on GitHub.

A Poc attempt at hunting suspicious thread creation events using ETW only. - 0xjbb/SuspiciousThreads

Complete CosmicSting (CVE-2024-34102) exploit suite for Magento/Adobe Commerce XXE vulnerability - russellwork2021-lgtm/cosmicsting-cve-2024-34102-exploit

🤖 Analyze and exploit command injection vulnerabilities in Unitree robots using BLE, enhancing cybersecurity and providing proof of concept for effective defense. - fromgabyaaye/UniPwn

XWiki Platform - CVE-2026-33137 PoC - Unauthenticated XAR Import via REST /wikis/{wikiName} - portbuster1337/CVE-2026-33137

A Burp Suite extension that seamlessly intercepts, decrypts, and re-encrypts AES-encrypted JSON payloads on the fly. - Re4lLife/AES-JSON-Native-Editor

Contribute to Mahfuzmridul/poc-exploit development by creating an account on GitHub.

Manual, non-Metasploit authenticated Remote Code Execution (RCE) exploit via the browser URL bar for Webmin 1.580 (CVE-2012-2982) - marinovharisan/Webmin-1.580---file-show.cgi-Manual-Remote-Command...

Burp extension to upload a swagger and test the endpoints with multiple JWT + autofill parameters when available in Proxy tab. - t0-git/burp_swagger_tester

Full-stack web app that detects SQLi, XSS, brute force, path traversal & scanner activity in Apache/Nginx access logs — Python/FastAPI backend + React/shadcn/ui dashboard. - Immxdium/Web-Lo...

RemoteRAT campaign analysis, IOCs, YARA rule, and publication page - JGoyd/RemoteRAT

Total POC exploit CVE. Contribute to 32BitZ-Studio/Total-POC-CVE development by creating an account on GitHub.

This repository is for custom loader (calca.exe) and payload (usercpla.dll) -> Connecting to private Sliver C2 - KentMichaelA/Red_Teaming-Simulation