A fast, open-source, template-driven vulnerability scanner for bug bounty - tuangatech/hacker-five

This exploit is based on CVE-2017-9757 and was built upon the original exploit by 0x09AL. - joaoaugustom/IPFire_2.19_RCE_Authenticated

深度渗透测试 AI Skill | Deep Penetration Testing Methodology — 黑盒渗透 + 白盒审计 + Multi-Agent 协同，以顶尖漏洞挖掘专家标准执行安全测试 - liuzhiyong/pentest-deep-dive

Contribute to Saku0512/CVE-2026-71557-poc development by creating an account on GitHub.

CVE-2026-64638: WordPress Pre-auth XSS → RCE (XSS2Shell) PoC - imbas007/CVE-2026-64638-POC

Zapscape (CVE-2026-64561) KVM/x86 shadow MMU UAF guest-to-host escape PoC mirror — V4bel/@v4bel, MIT; for authorized security testing - HackSpeak/CVE-2026-64561

Contribute to soluzka/antivirus-yara-rules-c development by creating an account on GitHub.

Taint is a PHP extension, used for detecting XSS codes - laruence/taint

PoC for CVE-2026-18953 — arbitrary file write (CWE-22) in awslabs.aws-transform-mcp-server's get_resource tool via the savePath parameter - ronamosa/CVE-2026-18953

Burp Extension for parameter shenanigans . Contribute to fire0088/BananaExtractor development by creating an account on GitHub.

Integrated Security Testing Environment for Web Applications as Burp Extension. - okuken/integrated-security-testing-environment

**Seamless, Zero-Prompt & Kernel-Verified Cross-Platform Privilege Escalation Framework** 专为桌面客户端打造的无感、轻量、高安全的跨平台（Windows / Linux / macOS）提权 SDK。 - xyz1001/elevate-kit

简单的 Web 漏洞扫描器（端口扫描 + 目录扫描 + 简单漏洞 POC）. Contribute to Judy-0206/web-vuln-scanner development by creating an account on GitHub.

Local network vulnerability scanner. Contribute to miiidev/blacklight-cli development by creating an account on GitHub.

Penetration testing & VAPT lab write-ups — web application, API, Android, and red team security research. Structured reports with methodology, PoC, and remediation guidance. - sana6086/Poc-labs

红队部门 Hermes profile 发行版：授权渗透测试/情报/利用验证/报告. Contribute to zyj010216y/hermes-dept-redteam development by creating an account on GitHub.

Template-based, modular, multi-language, shellcode obfuscator and compiler - dodonaeus/staticbypass

A reverse engineer's binary Swiss-army knife in Rust: triage, disassembly, function/CFG recovery, crypto-constant + YARA scanning for PE/ELF/Mach-O. Installs as 'knife'. - bl4ckr0ss3/knife

Curated YARA rules collection covering common malware families and techniques: packed PE detection, Cobalt Strike beacons, downloader stagers, and token grabbers. - fantasywastaken/YARA-Rules-Colle...

Detection artifacts for malware captured live by the Drosera honeypot — YARA, Suricata and Sigma rules, IOC feeds, a machine-readable blocklist and full analysis reports. TLP:WHITE. - AfterPacket/d...

Prove an injected web payload actually EXECUTES (alert(1) fires), not just reflects (a shared XSS-execution oracle over Santh's jsdet sandbox). - santhreal/detonate