CVE-2026-56164 is a critical missing-authentication vulnerability affecting on-premises Microsoft SharePoint Server. It allows unauthenticated, remote attackers to elevate privileges over a network...

Oktos 是一款红队后渗透平台，作为 XRED.TEAM 的一部分。它采用了模块化设计，支持 BOF 动态加载、多信道异步通信与内存免杀，内置的 AI 助手可辅助编排或自动执行后渗透任务，为红队提供隐蔽、高效、智能的作战能力。 - 1y0n/oktos

Inject APK payloads via an HTML-based Telegram mini-app interface for streamlined web injection tasks. - ammeericcu3243/apk-injector-hub-app

Contribute to woshidashabi1126/CVE-2026-70553-PoC development by creating an account on GitHub.

fully equip UltraEncabulator AV. Contribute to soluzka/antivirus-yara-rules development by creating an account on GitHub.

A modern web vulnerability scanner built with React and FastAPI that automates website crawling, technology detection, security header analysis, and vulnerability assessment with real-time scanning...

Self-hosted browser-backed web_search and web_fetch for Codex, Claude Code, OpenCode, Pi, OpenClaw, HermesAgent, LangChain, and custom Agents — MCP + REST with provider fallback and SSRF protection...

Claude Code-driven CVE-to-detection-rule pipeline (demo/enablement artifact) — grounded research, Sigma/YARA/Suricata rule generation, hook-based validation, Obsidian knowledge base - nkoziel/cve-t...

This reverse shell is a lightweight Python script that connects back to a netcat listener, giving the attacker remote command execution on the target machine. It's built for educational use...

A state-sponsored APT framework for cyber/counter-espionage featuring AI-driven zero-click supply chain attacks, autonomous exploit deployment, quantum-resistant polymorphic encryption, reverse DoH...

This project required the built-in of high-confidence detections in Microsoft Sentinel using KQL, focusing on identity security and reducing false positives. This project targets MFA bypass and cor...

AMSI Bypass Generator v2026 is a PowerShell snippet generator for security testing, helping assess Defender and EDR detection behavior in controlled lab environments through configurable AMSI-focus...

secMONSTER performs 150+ security tests including XSS, SQLi, RCE, SSRF, LFI, SSTI, XXE, NoSQL, CMDi, CRLF, open redirect, JWT attacks, OAuth/SAML bypass, cloud metadata (AWS/GCP/Azure), container e...

Fast and customized vulnerability scanner for the «ownCloud Nextcloud Unprotected Data Directory» vulnerability. - Lednerb/CloudPeeker

Python network vulnerability scanner with service detection and vulnerability reporting. - VivekDasare/network-vuln-scanner

扫出你实际装的 Apache Shiro 模块与版本,逐条判定官方 26 条 CVE 里哪些真的落在你身上。按「CVE × 模块」判定,零依赖单 jar。 - xiaoqiMikko/shiro-check

Contribute to Hunt-Benito/e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout development by creating an account on GitHub.

Python-based vulnerability scanner that checks common open ports, analyzes HTTP security headers, identifies exposed server banners, and generates a basic vulnerability report for educational and a...

Lightweight cybersecurity malware triage and security analysis laboratory using Ubuntu, YARA, Python and open-source security tools. - ekeleu/CCS-Security-Analysis-Lab

A Java Agent that disables Apache Log4J's JNDI Lookup to mitigate CVE-2021-44228 ("Log4Shell"). - winnpixie/log4noshell

Jenkins first automation project. Contribute to acejosephgcp2026-boop/jenkins-pipeline-poc development by creating an account on GitHub.