A high‑performance, memory‑safe malware static analysis platform written in Rust. Integrates YARA rules and supports PE/ELF/MachO analysis - niceyayale/openTrojan

Wazuh 4.7.2 SIEM on AWS via Terraform: manager, indexer and dashboard, with Suricata IDS and YARA malware agents plus VirusTotal integration - Occansey/terraform-wazuh

CVE-2026-24061 exploit PoC. Contribute to jacubes/CVE-2026-24061 development by creating an account on GitHub.

Contribute to dimaskaje/Malware-Detector-using-YARA-Rules development by creating an account on GitHub.

AI-authored YARA + Snort/Suricata detection rules for current malware campaigns and vulnerabilities. Each rule ships with reproducible specimens, structurally-similar benign cases, and a test trans...

can-i gtfo is a collection of Kubernetes RBAC permissions which can be abused to escape from pods, escalate privileges, pivot and more. - m10x/can-i-gtfo

CVE-2026-41940 is a critical authentication bypass vulnerability affecting cPanel and WHM. This repository is designed to demonstrate its Proof-Of-Concept - olofsatte/CVE-2026-41940-PoC

CVE-2026-48866 — Gravity Forms <= 2.10.0.1 Arbitrary File Deletion via Path Traversal (CVSS 9.6) - 0xABCD01/CVE-2026-48866

Web vulnerability scanner built in Python — headers, crawler, XSS and info leakage detection - especamilhal/vulnerability-scanner

PoC: Codex CLI hook trust hash pre-computation - silent RCE via SessionStart hook - psydck-pysdck/codex-hook-trust-bypass-poc

Contribute to deadparrot610/yara-rules-management development by creating an account on GitHub.

Security research on Craft CMS authentication mechanism - 0xrixet/Craftcms-PoC-CVE-2026-31266

A blazing-fast macOS antivirus CLI + TUI in Rust (defense-in-depth: hashes + YARA + heuristics + persistence audit) - Rani367/Armadillo

Nginx RCE chain PoC with CVE-2026-9256 and CVE-2026-42945 - y198nt/Nginx-chain-Rift-Poolslip

AI-DLC demo: URL metadata service (realistic SSRF) for Secure AI-DLC gate test - owen10380/aidlc-urlmeta-demo

CVE-2026-25860 POC git. Contribute to partywavesec/CVE-2026-25860 development by creating an account on GitHub.

Static analysis, IOCs, and YARA rules for the RBToolsBetaTest BAS loader (obfuscated Go downloader + abused BrowserAutomationStudio framework). - beatsbyluca/RBToolsBetaTest-loader-analysis

Web application security testing report and PoC screenshots (SQL Injection, XSS, Authentication Flaws). - devarsheambika18/FUTURE_CS_01-Web-Application-Security-Testing

Spoof dirty SELinux policy fingerprints on rooted Android to bypass DirtySepolicy detection - brianly1003/DirtySepolicySpoof

PowerShell reverse-shell payload generator engineered to bypass Windows Defender and AMSI. - Red-Parakeet/PhantomShell

BlandC2 - Python-based Command and Control (C2) framework for remote administration with server module, client builder, persistence mechanisms, and cross-platform command execution. - blandteampr/B...