The wp2shell vulnerability chain represents one of the most significant WordPress Core security issues in recent years. Because exploitation begins with an unauthenticated request and can ultimatel...

Yara and Yara X Linter . Contribute to ThreatFlux/yrlint development by creating an account on GitHub.

Contribute to Nizar-Lams/Yara-rules development by creating an account on GitHub.

泄露的针对各种 iOS 版本的漏洞利用工具包. Contribute to adoemwanmei/coruna-pro-v2 development by creating an account on GitHub.

Focused XSS fuzz scanner with smart payloads, reflection analysis, CSP checks, WAF hints, DOM sink detection, and optional browser validation. - rafashaalfiandi/XSSentinel

Burpsuite Extension - Cryptod decrypts and re-encrypts AES ciphertext inline while you test, so you do not have to copy ciphertext out to an external tool. - justakazh/cryptod

Self-hosted AI web-app vulnerability scanner — HPE Private Cloud AI framework - mlyu2000/ai-vulnerability-scanner

My penetration testing dashboard - runs nmap scans, msf exploitation, and loot the information in an easily digestible browser-based workflow. - Null-H3x/h3x-dash

Defensive NGINX CVE-2026-42533 map regex risk audit with config scanner, Splunk/Defender notes, and lab evidence. - srkyn/nginx-map-risk-audit

Proof-of-concept exploit for CVE-2026-63030, a pre-authentication vulnerability in WordPress (versions 6.9.0 through 7.0.1). - administrator-01001/CVE-2026-63030

A C2 Framework (for proof of concept). Contribute to ebx32/higgsc2 development by creating an account on GitHub.

Python reimplementation of SHIRO phoneme-to-speech alignment toolkit for Japanese singing voice - wavtechyukky/pyshiro

Template-based, modular, multi-language, shellcode obfuscator and compiler - dodokaicho/staticbypass

WinDbg JavaScript extension for x86 exploit development using pattern matching, ROP scanning, format-string payload generation, and shellcode encoding from the dx evaluator. - rogdooley/osed-windbg

A hands-on Spring Boot microservices playground for experimenting with production-grade distributed-systems patterns — service discovery, API gateway routing, centralized configuration, event-drive...

Contribute to joaovicdev/EXPLOIT-CVE-2026-63030 development by creating an account on GitHub.

Hermes 一体化爬虫 MCP 服务：单进程 FastMCP + Scrapling 三层抓取 + PostgreSQL 缓存 + SSRF 防护 - majehuang/h_claw

Contribute to lightrun-platform/weblogic-poc development by creating an account on GitHub.

SOC investigation of a suspected lateral movement attack using Sysmon, Windows Event Logs, Elastic SIEM, and MITRE ATT&CK to analyze Living-off-the-Land (LotL) activity and reconstruct the ...

Bare-metal cybersecurity & edge telemetry engine. Bypasses Python interpreter bottlenecks using native C-Bridges, SIMD bitwise vectorization, and cache-aligned memory blocks for sub-millise...

Authorized bug bounty & security research writeups — methodology, recon, and detection-bypass case studies. - afuckingco/security-writeups