Projeto de arquitetura de micro serviços resiliente para servir como laboratório de estudos, com observabilidade implementada - wfiabani/poc-micro-services

Mendeteksi versi (passive detection) & Exploitation CVE POC - 0xdenis77/CVE-2026-56291

A curated collection of Burp Suite plugins, extensions, and practical notes for security practitioners and penetration testers, including tools, scripts, and writeups that go beyond the official ma...

Yara rule repo. Contribute to defend-pippa/DEFEND-yara development by creating an account on GitHub.

A small list of template nuclei drafts. Contribute to panchiko-p/template-drafts development by creating an account on GitHub.

Serverless URL shortener on Cloudflare Workers: edge KV lookups, analytics written after the response via ctx.waitUntil(), D1 for aggregations, and SSRF-safe redirect validation. - jersonvillamizar...

Zapier-style webhook connector — declarative field mapping, SSRF-guarded relay, delivery logging - maa883151-eng/flowrelay

A combination of CVE-2026-55494 and CVE-2026-62308 to get root privilege RCE in tugtainer - 4qu4r1um/tugtainer-1.30.2-CVE-2026-55494-and-CVE-2026-62308-to-RCE

Repositório de estudo técnico e análise de scripts de exploit para Roblox. Código aberto, sem ofuscação, focado em auditoria de segurança e mecanismos de contra-medidas. - matheuspessole/rblx-secur...

Beginner YARA Malware Detector with 10 detection rules - Mshibe-dotcom/Yara-malware-detector

Days Without And RCE. Contribute to thezakman/DWARCE development by creating an account on GitHub.

Contribute to pagehafterkjw/wp-nuclei-templates development by creating an account on GitHub.

Contribute to incogbyte/wp-cve-exploits development by creating an account on GitHub.

Python-based vulnerability scanner that performs multi-threaded port scanning, banner grabbing, and outdated software detection on network hosts. Also audits web apps for missing security headers, ...

Python CLI scanner that audits web apps against the OWASP Top 10 — security headers, open redirects, SQLi/XSS indicators, CORS misconfig, sensitive file exposure, and more. - Moscvv/websentinel

🚨 真实应急响应实战靶场笔记：在极端不出网环境下，通过进程溯源、代码审计，彻底根除 Java 挖矿木马及 crontab/sh 隐藏持久化权限维持后门。 - JY-666-YINZI/Linux-schoolncident-response

Talon — Kernel-level mini EDR detecting DKOM hidden modules, syscall table hooks, ptrace injection, and C2 beacon patterns via kallsyms + kprobes + netlink. Built as the defensive counterpart to Ti...

Contribute to Greejith-k/Stored-Cross-Site-Scripting-Stored-XSS-Vulnerability-in-Beetel-450TC3-Router development by creating an account on GitHub.

AI-powered Web Vulnerability Scanner using Flask, Machine Learning, and Llama 3.1 for intelligent security analysis and vulnerability detection. - ayushoj28/ai-vuln-scanner

Due to improper permission checks on the app server, attackers can trigger JNDI injection via the "loadTree" interface to achieve RCE (requires lower JDK versions). Legacy vuln, p...

🚀 A high-performance, multi-processing RCE scanner & exploit helper written in Python. Specifically designed for fast, concurrent vulnerability scanning in isolated network environments.一款高...