CTF binary exploitation challenges — buffer overflow, ROP, ret2libc, format string, shellcode injection. Full walkthroughs with exploit code. - susheel-cybercode/binary-exploitation-writeups

Connection-bound NTLM relay broker for controlled HTTP/HTTPS browser sessions over SOCKS. - abdelaaziz0/NTLMancer

Contribute to nayanjani120-cpu/Network-Vulnerability-scanner development by creating an account on GitHub.

Arrowhead is a hardened, general-purpose MCP server built to demonstrate, not just document, best-practice Model Context Protocol security: OAuth 2.1 auth, SSRF and path-traversal protection, sandb...

CVE-2024-9264 Grafana SQL Expressions DuckDB LFI/RCE PoC - ozcanpng/CVE-2024-9264

CVE-2026-58138 - Orkes Conductor Unauthenticated RCE PoC - 0xgh057r3c0n/CVE-2026-58138

Cross-platform malware scanner (Windows/Linux/macOS) — Wacatac, trojans, backdoors, ransomware, cryptominers. YARA + IOC hashes + heuristics, reversible quarantine. - OpenDojoSystems0/EyesRedStrike

Contribute to Krishnamanaidu123/Vulnerability-Scanner-Mini-Project- development by creating an account on GitHub.

Fastjson 1.2.83 AutoType Bypass RCE (QVD-2026-43021) — 多层检测规则与防御方案 (WAF/RASP/eBPF/Sysmon) - Detect-DefenseLab/fastjson-1.2.83-rce-detection

Security research on remote code execution. Bug bounty and vulnerability disclosure program. - hananmtplen-oss/security-research-rce

检测 OpenTitan 漏洞工具. Contribute to Sakura-a-a/OT-SecFuzz development by creating an account on GitHub.

Fastjson1.2.83-2026-7月漏洞环境. Contribute to charis3306/Fastjson1.2.83-vul development by creating an account on GitHub.

自动化信息收集平台 - 编排 OneForAll / Nmap / httpx / Wappalyzer 的安全资产收集流水线 - bmslos/AICP

manual testing using burp and then use automates tool xsstrike - anju-cyber/xsstrike-xss

Python-based Emotet malware detection tool using YARA rules. - RENAZ18/Emotet-Detection-Tools

Safe static triage of a Cowrie-captured Bash payload with validated YARA and Sigma detections. - marvalous123/malware-analysis-yara-sigma

WebVulnScout is a production-grade, modular web vulnerability scanner built for authorized penetration testers, bug bounty hunters, and cybersecurity professionals. It maps every finding to the OWA...

Malware analysis reports and the detection rules derived from them - mustafaemre-re/detection-lab

Full red team engagement — Sliver C2, BloodHound AD enumeration, SYSTEM escalation, corp.local domain compromise - rithika-ujjalsingh/Full-Red-Team-C2-Infrastructure

Async FastAPI + Playwright service: URL to PDF/screenshot with browser pool, idempotent queue, local/S3 storage, JWT/magic-link, SSRF blocklist. Dockerized, tested. - Zaki-kek/url2pdf