Read-only WordPress security scanner for HestiaCP servers. Detects wp2shell compromise indicators (CVE-2026-63030 / CVE-2026-60137) across all hosted sites — per-user email reports, core file diff ...

DeniedLoader — C-based jittered beacon loader (6m66s) with indirect syscalls. Injects MiniDeniedXYZ (Rust shellcode) into trusted processes. Dropper creates 500+ decoy subdirectories in System32 ma...

POC CVE. Contribute to chor4o/saudi development by creating an account on GitHub.

Burp Suite extension for replaying requests across authorization profiles and finding broken access control. - xhzeem/Burp-AccessLens

An agent that evaluates and reports on an IoC (IP address, CVE, Hash, or package) - JeremiahJRRoss/Agent_IoC-Triage_Ross_Moda_26-Spring

Contribute to KawaiiHachimi/CVE-2026-43499-pkb110 development by creating an account on GitHub.

Polymorphic shellcode encoder for authorized pentesting & CTF - darkLabz001/001

YunSee CTF 战队官网 — 攻防对抗 / 漏洞研究 / 安全竞赛。纯静态，零构建零依赖。. Contribute to YunSeeTeam/YunSeeTeam.github.io development by creating an account on GitHub.

【Python计算机毕业设计分享】基于Python+深度学习的Web漏洞检测系统设计，MySQL Python开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - owenbrave/UyzgTDbb

This is a project that will assist with enumerating CVE's in RPMs and outputting them in a markdown report for integration into GitLab - UniqueTitanium/EnumerateCVE

RELAY: does an AI security report help another agent fix the bug? Real-CVE (ARVO) benchmark with an exploit-only sanitizer oracle. - SHIHAB69/relay-secreport-bench

Fastjson 1.2.83 RCE 靶场环境 (CVE-2026-16723). Contribute to why-success/fastjson-rce-lab development by creating an account on GitHub.

Random restaurant picker app built with Expo and Spring Boot - matsushimaeito0930-hue/Randish

Echos is a stealthy C2 traffic emulator built in Rust for Red Teamers. It simulates adversarial beaconing patterns and custom jitter to test EDR/NDR detection logic. Ideal for validating network se...

将时间维度暂留视觉 + 物理拖拽迷宫 + 语义/算力蜜罐三者结合的创新性反 AI 验证码开源组件. Contribute to Z-V-I/AI-recognition development by creating an account on GitHub.

Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network. - ChPratik/CVE-2026-54121

ulnerability Scanner A lightweight Python-based vulnerability scanner designed to identify common security weaknesses in web applications and network services. The scanner automates basic security...

CVE-2026-8206: Kirki Customizer Framework - Unauthenticated Account Takeover (CVSS 9.8) - Dungsocool/CVE-2026-8206

证据链驱动的漏洞验证引擎。不是扫描器——每个发现附带一条 curl 命令，终端跑一遍就能复现。. Contribute to qianlijaingshan/vuln-verify development by creating an account on GitHub.

ssrf-agent-guard is a Node.js module for protecting your HTTP/HTTPS requests against SSRF (Server-Side Request Forgery) attacks. It wraps http.Agent and https.Agent to enforce pre and post DNS host...