Static and dynamic analysis of real malware samples using Any.Run, comprehensive malware reports, and YARA detection rules. - lewandovskii9/malware-analysis

a collection of my very personal nuclei templates. Contribute to k11h-de/nuclei-templates-custom development by creating an account on GitHub.

Unprivileged user to root via CUPS logic flaw — macOS Sonoma, Sequoia, and Tahoe. Patched in macOS 26.6 / 15.7.8 / 14.8.8. - mac-123456789-lab/CVE-2026-39875-macOS-CUPS-LPE

A poc for a vulnerability in ZTE File Manager (zte.com.cn.filer) which allows to read arbitrary files from other apps with the privileges of this file manager - Skorpion96/CVE-2026-40000

Repository of Yara Rules & Config Extractors. Contribute to apophis133/Apophis-Detection development by creating an account on GitHub.

17-stage deterministic malware analysis pipeline. Hash → entropy → signature → sandbox → triage. No ML hype. Just math, YARA, and syscalls. - ARES-SYS/malware-pipeline

Contribute to saadhassan77/CVE-2025-64512---pdfminer.six-Remote-Code-Execution-RCE- development by creating an account on GitHub.

Real-time log analysis project featuring a deliberately vulnerable Flask app, custom Python detection rules mapped to MITRE ATT&CK, Telegram alerting, and a hardened remediated version for ...

⚠️ Intentionally vulnerable PHP + MySQL web app for practicing OWASP Top 10 (SQLi, XSS, CSRF, LFI, Command Injection, File Upload, IDOR) — for local/educational use only, DVWA-style with Low/Medium...

Cybe - A modern, cross-platform mobile security & privacy suite for Android & iOS. Features Password Manager, Wi-Fi Scanner, File Encryption Vault, Phishing URL Checker, Device Vuln...

Reproducer for CVE-2026-48204: Apache Camel camel-mongodb-gridfs gridfs.* header injection overriding the GridFS operation (enumerate/read/delete files) from an unauthenticated HTTP request (fixed ...

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. - ChPratik/CVE-2026-50522

Web-based Vulnerability Scanner project built for security assessment and vulnerability analysis. - divu638/Web-Vulnerability-Scanner

fastjson2 (≤ 2.0.61) autoType RCE 检测防御体系 — 五层 × 六产品纵深防御，覆盖完整攻击链，VM 端到端验证通过 - Detect-DefenseLab/fastjson2-2.0.61-rce-detection

Read-only WordPress security scanner for HestiaCP servers. Detects wp2shell compromise indicators (CVE-2026-63030 / CVE-2026-60137) across all hosted sites — per-user email reports, core file diff ...

DeniedLoader — C-based jittered beacon loader (6m66s) with indirect syscalls. Injects MiniDeniedXYZ (Rust shellcode) into trusted processes. Dropper creates 500+ decoy subdirectories in System32 ma...

POC CVE. Contribute to chor4o/saudi development by creating an account on GitHub.

Burp Suite extension for replaying requests across authorization profiles and finding broken access control. - xhzeem/Burp-AccessLens

An agent that evaluates and reports on an IoC (IP address, CVE, Hash, or package) - JeremiahJRRoss/Agent_IoC-Triage_Ross_Moda_26-Spring

Contribute to KawaiiHachimi/CVE-2026-43499-pkb110 development by creating an account on GitHub.

Polymorphic shellcode encoder for authorized pentesting & CTF - darkLabz001/001