SimpleHelp OIDC Authentication Bypass PoC. Contribute to J4ck3LSyN-Gen2/CVE-2026-48558 development by creating an account on GitHub.

Personal notes and YARA rules on malware analysis: VBA macro analysis workflow with oletools/CyberChef, x86-64 reverse engineering essentials, memory vulnerabilities (buffer overflow, format string...

Production-grade vulnerability scanner - TCP port scanning, TLS analysis, OWASP headers audit, CVE lookup - aiagentmackenzie-lang/argus-vulnerability-scanner

O CVE Vulnerability Scanner é uma ferramenta profissional e modular para varredura automática de vulnerabilidades CVE em ambientes de rede. A ferramenta detecta serviços em execução usando Nmap, id...

基于 Windows VEH 的高级动态内存保护与按需执行引擎。实现“按需解密，用后即焚”，支持多线程并发与动态工作集管理，专为高级安全研究与红蓝对抗设计。 - Niama78/PageGuardVEH

Async web vulnerability scanner — detects SQL injection, reflected XSS and LFI/path traversal by auto-crawling forms and links. Ships with a deliberately vulnerable Flask app for local demos. - Vic...

authorized VDP stored-xss test. Contribute to AmrMohammed07/cr-vdp-xss development by creating an account on GitHub.

A proof-of-concept extension for Burp Suite to get the hang of how to write one. - jpg2368-RIT/burp-poc

Multi-vector DevOps attack surface analysis — 18 CVEs across 12 tools mapped into a 9-layer kill chain. Includes deep-dive docs, attack chain simulations, and 56 detection rules (YARA, Sigma, Snort...

ScriptFang is a weaponized payload generation and fuzzing toolkit I built for Red Teamers, Bug Bounty hunters, and offensive security professionals. ScriptFang crafts advanced XSS payloads, tests r...

ESP32-based iot vulnerability scanner. Contribute to Rajveersoni9/iot-sentinel development by creating an account on GitHub.

This repository contains a proof-of-concept (PoC) exploit for CVE-2026-38751, affecting OpenSTAManager ≤ 2.10. The vulnerability allows an authenticated attacker to upload a malicious module via t...

Contribute to K3ysTr0K3R/CVE-2025-57819 development by creating an account on GitHub.

BLOODFANG is my second cutting-edge red team offensive toolkit, crafted for rapid reconnaissance, exploitation, and post-exploitation operations. Packed with advanced modules like password spraying...

Offline desktop studio for writing, testing and managing YARA rules — Tauri 2 + YARA-X, 100% local - platinum2high/yara-studio

A blazingly fast, multi-threaded TUI malware analysis tool built in Rust. Features deep PE parsing, YARA scanning, and heuristic risk scoring. - Rhacknarok/hacksguard

CVE-2026-13768: Privileged iothubowner IoT Hub credential — fleet enumeration, device RCE, home-network pivot — Gardyn (ICSA-26-183-03) - MichaelAdamGroberman/CVE-2026-13768

Deliberately-vulnerable PHP web app: 5 attacks (SQLi, stored/reflected XSS, brute force, directory traversal) each with a hardened fix. Educational/portfolio lab. - sarjanpatel22/web-app-security-lab

A Python based vulnerability scanner that automatically identifies security weaknesses, misconfigurations, and potential attack vectors in systems, networks, and web applications. - AZA738/Vulnerab...

Desktop malware scanner built with Python that combines VirusTotal API, YARA rule scanning, encrypted API key storage, SHA-256 hashing, caching, and exportable scan reports. - VijayShanbhag/VT-Desk...