CVE-2026-54121 (Certighost) AD CS DC-impersonation PoC. Patched SAN handling + MAQ-safe account reuse. - marcgoam/CVE-2026-54121-CertiGhost

Practitioner field guide + hands-on lab walkthrough for AWS, Azure, and GCP red teaming — IAM/Entra ID enumeration, privilege escalation, metadata SSRF, and automated tooling. - abdallaabdalrhman/C...

Sigma detections for real ATT&CK techniques, with a compiler that emits Wazuh, Splunk and Sentinel from one source. 36 rules, 33 techniques, MIT. - zshguy/tyrian-detection-pack

一个 Windows 桌面取证工具，用于快速采集计算机上的各类数字痕迹和证据，适合安全调查、应急响应和内部审计场景。 - stushansusu/forensic-collector

舆情演练红蓝对抗. Contribute to simonliu1358/yuqing development by creating an account on GitHub.

Advanced XSS vulnerability scanner using Selenium and real browser execution verification for authorized security testing and bug bounty research. - pratikkhairnar160/Vaelion-XSS

A Python-based mini vulnerability scanner for port scanning and security checks. - Mactoy1/Vulnerability-Scanner

Malware analysis of a malicious PuTTY executable (Trojan.Dropper) that extracts a PowerFun PowerShell reverse shell. Includes IOCs, YARA rule, and full analysis report. - Stefan-Krijt/Putty_Patrol

fastjson2 RCE Exp. Contribute to Vme18000yuan/fastjson2Exp development by creating an account on GitHub.

PoC for CVE-2026-53629, blind SQL injection in the GLPI history log filter - 5kr1pt/glpi-logbleed

PoC: Flask-KVSession & Flask-KVSession-fork Pickle Deserialization RCE (CVE pending) - deepanshhooda/flask-kvsession-pickle-rce

Contribute to zyyuy0u/AIS3_IIS_ASP.NET_Deserialization2RCE development by creating an account on GitHub.

Website for the Wapiti web vulnerability scanner. Contribute to wapiti-scanner/wapiti-scanner.github.io development by creating an account on GitHub.

Bilingual web vulnerability scanner with business-friendly enhanced security reports (EN/AR) - Saharnaz-ch/web-vuln-scanner-sylure

CVE-2026-43499: Linux kernel futex PI use-after-free research package - dnlid/CVE-2026-43499

Contribute to zer0dayf/CVE-2026-65008 development by creating an account on GitHub.

Web-based vulnerability scanner that orchestrates Kali/Debian security tools (nmap, nikto, whatweb, sqlmap, testssl.sh) via Docker. Built with PHP/MariaDB, features a dark cybersecurity UI, scan re...

fastjson2 ≤ 2.0.62 利用多态反序列化（ObjectReaderSeeAlso）+ URLClassLoader.findClass 点号转斜杠替换，绕过 AutoType 白名单及 JDK ClassLoader.checkName，实现远程代码执行。 - heart147/fastjson2-rce

Contribute to mattp8638/BlueTeam development by creating an account on GitHub.

Security Advisory: Negative Chunk-Size Parsing Causes Memory Corruption in facil.io - theopaid/CVE-2026-66731-Negative-Chunk-Size-Parsing-Causes-Memory-Corruption-leading-to-Server-Crash

Security Advisory: Infinite Loop DoS in facil.io MIME Parser (Partial Boundary) - theopaid/CVE-2026-66730-Infinite-Loop-DoS-in-facil.io-MIME-Parser