DFIR case: injected shellcode in powershell.exe. Contribute to Ivan-qa-rgb/powershell-shellcode-case development by creating an account on GitHub.

Penetration test report: OpenSTAManager RCE, NFS misconfiguration, Roundcube email access, OliveTin command injection | Arabic/English | AMN SECURITY - amnsecurity/support-infrastructure-compromise...

CVE-2025-24813 - Apache Tomcat RCE via Session Deserialization - PoC Exploit - yuzuki-ayanami/CVE-2025-24813

Ghostlink HTB — Full Chain AD + Gogs Exploitation | MQTT → NTLM Relay → Path Traversal → CVE-2025-8110 → ADCS ESC11 → DCSync | AMN SECURITY - amnsecurity/internal-domain-development-compromise-asse...

Federated health information exchange reference: EU/US jurisdiction cells, OPA policy-as-code, OPAL live consent, FHIR R4 - SafetyMP/Healthcare-Data-Exchange

A Burp Suite extension that automatically discovers API endpoints, organizes them by host, and generates OpenAPI (Swagger) documentation in real time. - mesbah-diu/API-Discovery-Pro

This repo contains everything needed to run your own Interactsh OOB (out-of-band) interaction server, use it from the Interactsh Collaborator Burp extension, and keep proof-of-concept evidence orga...

CVE-2019-0232 - Apache Tomcat CGIServlet enableCmdLineArguments RCE - PoC Exploit - yuzuki-ayanami/CVE-2019-0232

Remote code execution for the pokewalker via arduino mega - mamba2410/pokewalker-rce

CVE-2023-34468 Apache NiFi ExecuteSQL H2 RUNSCRIPT RCE PoC - ozcanpng/CVE-2023-34468

Detecting malware C2 traffic using network metadata and beacon analysis - Imteyaz-git/malware-c2-traffic-classifier

Contribute to meeque/xss-demo-app development by creating an account on GitHub.

Uses [yara-x](https://github.com/VirusTotal/yara-x) and a configurable ruleset to publish signature hits as AZUL features. - AustralianCyberSecurityCentre/azul-plugin-yara

Some sensitive backend endpoint which can be leaked in HP DeskJet 2800 series printer - typedefabcd1234ntd/CVE-2026-13753-poc

Reverse engineering & malware analysis, curated and verified — disassemblers, unpacking, exploit dev, fuzzing, DFIR, and the deep-cut writeups other lists miss. - ZX41R/awesome-reverse-engi...

Capture request/response pairs from the Proxy, edit them, and have Burp automatically serve your modified versions whenever a live message matches. - UmbraDeorum/Burp-Manipulator-Extension

YARA Classifier using local LLMs for natural language to rule pipeline - Plurilock Corp. - Jenkinxs/Sentinel

漏洞复现和利用笔记. Contribute to Blushl/redteam-notes development by creating an account on GitHub.

Static malware triage tool. Contribute to mason-rosenbergerl/malscan development by creating an account on GitHub.

开源云安全事件响应 Skill：证据保全、事件时间线、影响范围、可逆遏制、恢复与复盘。. Contribute to linxumoney/cloud-incident-coach development by creating an account on GitHub.

Contribute to hackerabhinavverma/burp-mcp development by creating an account on GitHub.