Academic proof-of-concept demonstrating CVE-2026-46442 for authorized security research. - codeb0ssx/CVE-2026-46442-PoC

Bayonet 是应卓开发的 Spring Boot 4.x 增强库，提供可复用的自动配置、工具类和集成支持，涵盖 Web、安全、数据（JPA/Redis/MongoDB）、校验、日志等领域。 - yingzhuo/bayonet

On-demand malware scanner (hash signatures + heuristics + optional YARA/VirusTotal) with a CustomTkinter GUI, packaged as a Windows .exe - DrVerzide/pyguard-scanner

A malware analysis sandbox: VM execution, five-signal behavioral monitoring, YARA detection, and automated Sigma rule generation from what was actually observed. - AshwinNHacker/Crucible

wp2shell. Contribute to Icex0/wp2shell-poc development by creating an account on GitHub.

Linux & security fundamentals demonstrated through the OverTheWire Bandit wargame skills-mapped, spoiler-free. - WiLL75G/overthewire-bandit-skills

Automated web vulnerability scanner — PFE project (Flask + React) - mejriachref04/SentinelScan

File hashing and static malware-triage helper — entropy, PE metadata, YARA-lite pattern matching and IOC extraction. - arpitgupta369/malware-triage-hasher

A Burp Suite extension that connects APIsec.ai and Burp Suite in both directions. - apisec-inc/apisec-relay

Pre-auth RCE in WordPress Core via REST API batch route confusion + WP_Query SQLi (CVE-2026-63030 / CVE-2026-60137). Detection PoC. - Senanfurkan/wordpress-cve-2026-63030

CyberTool is a modular security analysis toolkit designed for forensic analysis, malware detection, and threat intelligence gathering. It provides a unified interface for various cybersecurity task...

PoC Repository with Lab Setup for Wp2Shell RCE (File privilege precondition) - AdnaneKhan/Wp2Shell-RCE

Scan RMM-managed software endpoints for vulnerabilities using NIST NVD, CISA KEV, and EPSS data with this agentless PowerShell script. - Staffardprobable495/fleet-cve-scanner

Lightweight scanner that detects vulnerable Log4j versions and Log4Shell (CVE-2021-44228) indicators in a filesystem tree. - arpitgupta369/log4shell-scanner

A Python-based automated vulnerability scanner designed to identify common security weaknesses in web applications by performing a series of intelligent security assessments. - Rishikesh-M/Thom

Try to test stored xss. Contribute to Ozerocool/xss-test development by creating an account on GitHub.

ML pipeline for CVE exploit-likelihood prediction and SBOM patch prioritization (NVD, EPSS, KEV) - ihassanrayan-max/patchpilot

AsenaPlug — HTTPS-disguised tunnel for selective DPI/DNS-censorship bypass, with a system-tray app for Windows & Linux - KaanAlper/AsenaPlug

cve2poc is a small Go CLI that finds public proof-of-concept repositories for a CVE using nomi-sec/PoC-in-GitHub - 0xP1ckl3d/cve2poc

Educational PoC + lab for CVE-2026-63030 + CVE-2026-60137: pre-auth SQLi in WordPress core via REST batch-route confusion - 47Cid/wp2shell-lab

MCP marketplace with 8-layer Sentinel security audit + ATC (Agent Trust Card) — SSL certificates for AI agents. 7,063 real skills, all free. - edgarfloresguerra2011-a11y/marketnow