Full network/system penetration test of Metasploitable 2 — recon → root compromise (Samba RCE, ingreslock, MySQL/PostgreSQL default creds) → post-exploitation, with reports, per-finding write-ups, ...

Aradbase-Sigma is a repository containing behavior-based Sigma rules developed from Aradbase-YARA malware detection research. - bay-ar4fah/Aradbase-sigma

Full walkthrough of HackTheBox "Silentium" (Medium/Linux). Chains three CVEs: CVE-2025-58434 leaks a Flowise password reset token unauthenticated, enabling account takeover; CVE-2...

Contribute to MrChrisLia/hermes-burpsuite-agent development by creating an account on GitHub.

Change TTL to bypass hotspot limit. Contribute to phuc4real/TTLChange development by creating an account on GitHub.

Burp Suite extension that automatically flags non-standard HTTP headers in proxy traffic, helping you spot custom application headers that may reveal internal infrastructure, debug endpoints, or at...

Contribute to ShashankD210/nuclei-templates development by creating an account on GitHub.

Threat Intel IoCs + bits and pieces of dark matter. Published by Gen Threat Labs. - gendigitalinc/ioc

entest RuleGen is a local Python tool that converts pentest reports to Markdown and generates reviewable Semgrep rules and Nuclei templates from findings that include code snippets, execution trace...

Contribute to ShashankD210/nuclei-template development by creating an account on GitHub.

Burp extension for HTTP request smuggling (PortSwigger base + Desync Agent fork) - patrick-projects/http-request-smuggler

PortSwigger Web Security Academy lab notes: SQL injection, reflected XSS, authentication bypass via timing. - dhxnnn/portswigger-labs

better-sqlcipher (Threema) loadExtension() RCE. Full system compromise via arbitrary native code loading. Confirmed on v12.10.0 (latest). CWE-427. CVSS 9.8. - jabir-dev/CVE-2026-BetterSQLCipher-RCE

Useful Sigma SIEM Detection Rules for SecurityOnion, Wazuh and more ... - C2RT/Sigma

ArubaOS 8.13.2.0 pre-auth attack surface research. XXE+SSRF, ICMP reflection, buffer over-read, hardcoded credentials — all submitted to HPE Bugcrowd, marked N/A. No fixes issued. - JM00NJ/HPE-Ar...

YARA signature and IOC database for my scanners and tools - Neo23x0/signature-base

🔐 A Python-based Web Vulnerability Scanner that detects reflected XSS and input sanitization weaknesses using payload injection and response analysis. - GauriSomwanshi29/Syntecxhub_Web_Vulnerabilit...

Contribute to Jeydori/Danphe-XSS-CVE-PoC development by creating an account on GitHub.

用 AI 来操作JYso，并在AI时遇到反序列化和JNDI注入情况自动调用. Contribute to qi4L/JYso-skills development by creating an account on GitHub.

Code and configuration to manage Kubernetes project infrastructure, including various *.k8s.io sites - kubernetes/k8s.io

Contribute to Jeydori/Danphe3.2-XSS-CVE-PoC development by creating an account on GitHub.