PoC for CVE-2026-44848: Portainer missing authorization on Docker plugin endpoints -> host RCE (GHSA-rrmm-9v76-h3p4). Stdlib-only Python. - Boreas37/CVE-2026-44848-PoC

Defensive IOC + vulnerability triage for Claude Code: a subagent plus two key-free skills that aggregate 10 free open-source threat feeds and rate a CVE's exploit maturity. No API keys requ...

Contribute to codeb0ssx/CVE-2026-64849-PoC development by creating an account on GitHub.

Add ringtones to your cobalt strike clients to make engagements more fun - deguzmanjc/cobaltstrike_ringtones

Wire a Greenbone/OpenVAS vulnerability scanner into Wazuh+Graylog: read-only GMP collector, dual delivery, Wazuh rules (JSON-decoded), and a vulnerability dashboard. Sanitized reference. - secdoc/g...

Automated vulnerability scanner aligned with OWASP Top 10 (2024/2025) - leomarqueseh/BlueGuard

picoclone CTF challenge: Stored XSS (web · medium) - sparflag/xss-stored

picoclone CTF challenge: Reflected XSS (web · easy) - sparflag/xss-reflected

EncryptInterceptor fail-open bypass in Apache Tomcat Tribes clustering leading to unauthenticated RCE via Java deserialization. - CypherHippie/CVE-2026-34486---unauthenticated-RCE-via-Java-deserial...

CI/CD-ready Python automation for continuous YARA rule ingestion, signature deduplication, and Wazuh indexing. - Hackdany/IDS-YARA-Rule-Automation

A dual-mode Web vulnerability scanner with active crawling/detection and passive traffic analysis - Dingding6633/websentry

Automated comparison of Trivy, Snyk and Clair . Contribute to Manju0301/msc-container-vulnerability-scanner-comparison development by creating an account on GitHub.

picoclone CTF challenge: Shellcode Shack (binary exploitation · hard) - sparflag/shellcode-injection

A minimal Linux x86-64 staged shellcode designed to demonstrate how a compact first-stage payload can load a larger second-stage shellcode into memory. - sebas-gith/TinyShellcode

CVE-2026-64849 PoC. Contribute to BiuTrap/CVE-2026-64849 development by creating an account on GitHub.

Download YARA rules to detect, classify, and investigate suspicious files with a trusted open-source engine. Build precise patterns, automate security checks, speed up incident response, and streng...

Jenkins pipeline practice for SAST scanning and Docker Compose deployment. - jo-0412/vuln-spring-sast-practice

Proof of Concept for CVE-2026-19598 affecting Pods <= 3.3.9. - DeadExpl0it/CVE-2026-19598-PoC

all nuclei templates. Contribute to Hacker0neKD/nuclei_templates development by creating an account on GitHub.

尝试移植CVE-2026-43499提权漏洞到HW P20Pro上. Contribute to zychen027/CVE-2026-43499_HW-CLT-AL01 development by creating an account on GitHub.

Desktop app that detects process-injection malware in Windows memory images — a 7-stage Volatility 3 pipeline producing court-style PDF reports, STIX/CSV IOCs, and YARA/Sigma rules. - Ashel7577/mem...