Firmware binary security analyzer (NX/PIE/RELRO, CVE/EPSS/KEV, SBOM, YARA) - pure Python, 21-step pipeline - V33RU/firmaudit

Dynamic malware analysis and SOC incident investigation using FLARE VM, Wireshark, YARA, and industry-standard tools. - BashiruDamoah/DYNAMIC-MALWARE-ANALYSIS-AND-SOC-INCIDENT-INVESTIGATION-A-PRACT...

An integrated exploit server and OOB detection platform for Burp Suite - debianmaster17/Hostware

PSA PoC 딜리버리 경험을 case study로 재구성한 포트폴리오 문서 저장소. Contribute to HellCoding/psa-delivery-case-study development by creating an account on GitHub.

POC for CVE-2026-49009, an authenticated path traversal to RCE issue in Mender Server. - j0xh-sec/CVE-2026-49009

代码安全审计技能 — 覆盖OWASP Top 10全类别，自动检测漏洞并生成修复代码. Contribute to sheng657/security-audit development by creating an account on GitHub.

Python tools for solving PortSwigger Web Security Academy labs without Burp Pro - cyberprophetTV/portswigger-lab-tools

In this repo, we’ll walk through building a home SOC lab where you can see how common attack techniques generate logs, and how defenders can detect and investigate them using Splunk. - GL1T0H/End-T...

Nuclei Templates Directory. Contribute to dwisiswant0/nuclei-templates-dir development by creating an account on GitHub.

Exploit de Execução Remota de Código (RCE) no XWiki - hasecto/CVE-2025-24893

NTLM/Kerberos relay attack prerequisite checker for Active Directory environments - DenialAndError1337/RelayHound

Contribute to LuizHenz/PoC-CVE-2025-55182 development by creating an account on GitHub.

JS Miner Pro is a lightweight, customizable Burp Suite extension designed to find hard-coded secrets, API endpoints, and hidden paths inside JavaScript, JSON, and HTML files. - tobiasGuta/JS-Miner-...

Static and dynamic malware analysis with IOC extraction, persistence analysis, and PCAP-based threat investigation. - jhaaaryan/malware-analysis-threat-investigation

Novel DonutLoader variant — dual-channel custom C2 (HXh payload delivery TCP/8853 + steganographic beacon TCP/7070), 10-host operator cluster on AS138995, Hunt.io Chalubo mislabel documented. YARA,...

指定版本mysql 安全漏洞分析. Contribute to leyoushilei/MySQL-Vulnerability-Risk-Analyzer development by creating an account on GitHub.

Exploitation write-up for PortSwigger Path Traversal lab — Null Byte Bypass (%00). Demonstrates how appending %00 to a filename terminates OS-level string processing, bypassing server-side extensio...

This repo contains custom scripts. Contribute to sambiyal/Portswigger-Burp-Extension development by creating an account on GitHub.

用于自动化检测图片上传功能中的XSS漏洞。通过将上传的文件修改为SVG格式并插入XSS Payload来测试漏洞。 - xiaolu-cmd/SVG-XSS-Upload-Scaner

Crossplane configuration package: crossplane-kubernetes-provider. Kubernetes provider, ProviderConfig, and RBAC. - hops-ops/crossplane-kubernetes-provider

Linux kernel CVE exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment anymore. - bsauce/kernel-exploit-factory