Automated vulnerability scanner aligned with OWASP Top 10 (2024/2025) - leomarqueseh/BlueGuard

picoclone CTF challenge: Stored XSS (web · medium) - sparflag/xss-stored

picoclone CTF challenge: Reflected XSS (web · easy) - sparflag/xss-reflected

EncryptInterceptor fail-open bypass in Apache Tomcat Tribes clustering leading to unauthenticated RCE via Java deserialization. - CypherHippie/CVE-2026-34486---unauthenticated-RCE-via-Java-deserial...

CI/CD-ready Python automation for continuous YARA rule ingestion, signature deduplication, and Wazuh indexing. - Hackdany/IDS-YARA-Rule-Automation

A dual-mode Web vulnerability scanner with active crawling/detection and passive traffic analysis - Dingding6633/websentry

Automated comparison of Trivy, Snyk and Clair . Contribute to Manju0301/msc-container-vulnerability-scanner-comparison development by creating an account on GitHub.

picoclone CTF challenge: Shellcode Shack (binary exploitation · hard) - sparflag/shellcode-injection

A minimal Linux x86-64 staged shellcode designed to demonstrate how a compact first-stage payload can load a larger second-stage shellcode into memory. - sebas-gith/TinyShellcode

CVE-2026-64849 PoC. Contribute to BiuTrap/CVE-2026-64849 development by creating an account on GitHub.

Download YARA rules to detect, classify, and investigate suspicious files with a trusted open-source engine. Build precise patterns, automate security checks, speed up incident response, and streng...

Jenkins pipeline practice for SAST scanning and Docker Compose deployment. - jo-0412/vuln-spring-sast-practice

Proof of Concept for CVE-2026-19598 affecting Pods <= 3.3.9. - DeadExpl0it/CVE-2026-19598-PoC

all nuclei templates. Contribute to Hacker0neKD/nuclei_templates development by creating an account on GitHub.

尝试移植CVE-2026-43499提权漏洞到HW P20Pro上. Contribute to zychen027/CVE-2026-43499_HW-CLT-AL01 development by creating an account on GitHub.

Desktop app that detects process-injection malware in Windows memory images — a 7-stage Volatility 3 pipeline producing court-style PDF reports, STIX/CSV IOCs, and YARA/Sigma rules. - Ashel7577/mem...

A comprehensive portfolio of vulnerability research, network exploitation, and application security mitigations. Features custom exploits for DNS/TCP protocols, DOM-based XSS worms, SQL injection b...

AI 驱动的漏洞自动验证平台：提交仓库与漏洞描述，在隔离沙箱中白盒审计、搭靶场复现并出具中文报告。. Contribute to pgnzbl-ux/crucible development by creating an account on GitHub.

A simple Open-Source C2 framework for Red Teaming labs. - sinyblack59-del/OpenC2-Framework

本仓库提供一套标准化漏洞披露技能（skill），帮助安全研究人员、企业安全团队和漏洞响应人员在遵循负责任披露原则的前提下，按照 CVE、CNVD、CNNVD 的官方/公开规范准备和提交漏洞报告。支持字段校验、模板生成、多格式导出、状态跟踪，减少因格式错误、信息缺失导致的退稿。 - rockmelodies/cve-cnvd-cnnvd-submission-skill

Demonstrates identifying and remediating a known critical CVE (Spring4Shell) using OWASP Dependency-Check - Hajra-khan-3/spring-boot-dependency-audit