Original research and non-destructive PoC for a pre-auth Base64-decoded password stack buffer overflow in Netis NC63 login.cgi - ozcanpng/CVE-2026-76070

Self-hosted canary tokens and honeypots — free edition of the Sentinel line - nizartuanku/decoy

Awesome YARA. Contribute to cybersecurity-dev/awesome-yara development by creating an account on GitHub.

automated Python-based cryptographic data recovery tool designed to mitigate post-exploit ransomware encryption vectors. - emad-123/log4j-ransomware-bruteforcer

Salesforce DX GitHub Jenkins POC. Contribute to sirfmandeep-coast/sf-github-jenkins-poc development by creating an account on GitHub.

A simple Open-Source C2 framework for Red Teaming labs. - sinyblack59-del/SinyC2

🛡️ Enterprise-Grade Web Security Auditor, Vulnerability Scanner & Dual-Report Engine in Python - Saura0S/AegisWeb

Secure code review of a sample banking application,10 vulnerabilities identified (SQLi, broken access control, XSS, CSRF) via manual review + Bandit, remediated and verified with a re-scan. - amant...

Form validation security testing - XSS injection, SQL injection, boundary lengths, special characters. Found real vulnerability: checkout accepts malicious payloads. Playwright + TypeScript. - Djon...

Damn Small XSS Scanner. Contribute to stamparm/DSXS development by creating an account on GitHub.

A comprehensive collection of web security vulnerability notes covering concepts, attack techniques, real-world examples, exploitation methodologies, and mitigation strategies for security research...

Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables SELinux, spawns root shell - Qingizi7/cve-2025-21479_iqooneo8

Get the exchange rates for currencies. Contribute to suchlab/currenzy development by creating an account on GitHub.

PCAP investigations using Zeek and Suricata to analyze DarkGate malware delivery and Sliver C2 activity, with Linux log parsing, file extraction, hashing, and OSINT enrichment. - ronaplayda4/zeek-s...

PoC exploit chain for CVE-2026-2796: SpiderMonkey WebAssembly sandbox escape (signature type confusion -> arbitrary R/W -> RCE) - SneakyNachos/CVE-2026-2796-escape-wasm-by-using-wasm

https://github.com/TheWover/donut in pure C#（.NET 10）. supports compression, AMSI/WLDP/ETW bypass, etc. - Ptkatz/SharpDonut

GhostC2: Un framework de Comando y Control (C2) sigiloso que utiliza protocolos no convencionales para comunicación encubierta. - santiagoalza2132-art/GhostC2

Contribute to BayajidAlam/jenkins-poc development by creating an account on GitHub.

● Automated malware analysis and detection rule generation pipeline using Wazuh SIEM, YARA, and Sigma rules - Howard1x5/detection-as-code

Contribute to anands-bounteous/jira-confluence-mcp development by creating an account on GitHub.

Contribute to mekrina/fastjson-1.2.83-rce-research development by creating an account on GitHub.