WinDbg JavaScript extension for x86 exploit development using pattern matching, ROP scanning, format-string payload generation, and shellcode encoding from the dx evaluator. - rogdooley/osed-windbg

A hands-on Spring Boot microservices playground for experimenting with production-grade distributed-systems patterns — service discovery, API gateway routing, centralized configuration, event-drive...

Contribute to joaovicdev/EXPLOIT-CVE-2026-63030 development by creating an account on GitHub.

Hermes 一体化爬虫 MCP 服务：单进程 FastMCP + Scrapling 三层抓取 + PostgreSQL 缓存 + SSRF 防护 - majehuang/h_claw

Contribute to lightrun-platform/weblogic-poc development by creating an account on GitHub.

SOC investigation of a suspected lateral movement attack using Sysmon, Windows Event Logs, Elastic SIEM, and MITRE ATT&CK to analyze Living-off-the-Land (LotL) activity and reconstruct the ...

Bare-metal cybersecurity & edge telemetry engine. Bypasses Python interpreter bottlenecks using native C-Bridges, SIMD bitwise vectorization, and cache-aligned memory blocks for sub-millise...

Authorized bug bounty & security research writeups — methodology, recon, and detection-bypass case studies. - afuckingco/security-writeups

WordPress Core Unauthenticated RCE (CVE-2026-63030, CVE-2026-60137) - 0xjessie21/wp2shell-checker

Detect & clean up wp2shell (CVE-2026-63030) WordPress compromise — bulk-runnable, read-only by default - InstaWP/wp2shell-scan

FreePBX 未认证SQL注入导致远程代码执行，FreePBX 15 (低于 15.0.66)、16 (低于 16.0.89)、17 (低于 17.0.3)。该漏洞位于商业化“endpoint”模块中，因对用户输入过滤不严，允许未认证的攻击者绕过管理员权限，执行SQL注入，并最终实现远程代码执行 - Neobee714/CVE-2025-57819-POC

A comprehensive and growing web vulnerability scanner that aims to provide a professional report at the end of scanning - MacTash/web-cross

A Python-based Web Vulnerability Scanner that detects basic Reflected XSS vulnerabilities in authorized web applications. It analyzes responses, identifies potential vulnerabilities, and generates ...

用户用自然语言描述目标、关注漏洞、资产重要性和扫描约束，系统先用规则或 LangChain 结构化输出转成 Intent，再通过授权、域名白名单、私网和 DNS 策略门。策略通过后调用 Mock 或受控 Nuclei 扫描器。Nuclei、ZAP、Nessus 报告会被归一化成统一 Finding，通过稳定指纹去重，然后结合 CVSS、资产重要性、证据置信度做确定性风险评分。最后从 Chro...

Web App Risk Assessment | 4 Critical/High findings | SQLi 9.8 · XSS 7.3 · Brute Force 7.5 · CSRF 6.5 | CVSS · OWASP · ISO 27001 | Audit-grade report - Oracleo/GRC-Project-02-Web-Application-Securit...

ActiveScan++ Burp Suite Plugin. Contribute to albinowax/ActiveScanPlusPlus development by creating an account on GitHub.

An end-to-end SOAR automation project integrating YARA, Splunk Enterprise, n8n, VirusTotal, Docker, and PowerShell to automate malware detection, threat intelligence enrichment, centralized logging...

Academic cybersecurity framework for analyzing payload encoding, obfuscation techniques, entropy metrics, and signature-based detection using a modular transformation pipeline. - DivyanshiKishore/c...

PoC for CVE-2026-63030 + CVE-2026-60137, AKA WP2Shell - Crypto-Cat/wp2shell

A reproducible Vagrant testbed for CVE-2026-43499 (GhostLock). Provisions an isolated, unpatched Ubuntu 22.04 VM with locked kernel updates to benchmark automated AI pentesting tools. - Daniyal48/g...

Priority-based status aggregator for WS2812B LED strips. ESP8266 firmware + Python daemon; any source (Claude Code, GitLab CI, scripts) drives it, most urgent wins. - Riscue/status-led