Web access skills for Prime Agent: multi-backend search (Gemini grounding, Tavily, Brave, Serper, Exa, SearXNG, DuckDuckGo) and SSRF-guarded page fetching with HTML-to-markdown and PDF extraction -...

a walkthrough of all six levels of flaws.cloud — aws s3, ebs, imds and iam misconfigurations, and how they chain into a full account compromise - Elnimo-00/cloud-infra-pentest

Proof-of-concept for CVE-2026-18315 (TrueBooker WordPress Plugin): Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover - nastar-id/CVE-2026-18315-PoC

Autogenerate YARA rules from collections of similar files - jhumble/sigmaker

A modular Web Application Vulnerability Scanner built with Python. Features HTTP header analysis, directory fuzzing, custom payload injection for SQLi/XSS detection, and automated reporting. Design...

The project studies how antivirus engines detect shellcode and develops obfuscation techniques to evade them, then measures how successfully these modified payloads bypass detection in an isolated ...

Fileless shellcode dropper in C++ using WinINet API. Downloads and executes shellcode in-memory without touching disk. Educational purposes only. - Segaotava/havoc-fileless-dropper

CVE-2026-18366: Events Manager < 7.4.1 — Unauthenticated Privilege Escalation to Administrator. Write-up and proof-of-concept (poc7.py). - ghostpels/CVE-2026-18366

Lightweight C2 agent simulation framework for red team adversary emulation & offensive security research. Demonstrates basic C2 callback patterns for SOC monitoring, custom TCP packet frami...

This python script exploit the vulnerable marimo /terminal/ws endpoint and returns a interactive shell. - dodeepsink/CVE-2026-39987.py

Controlled PoC: composite action for demonstrating mutable-tag supply-chain RCE mechanism (authorized self-owned sandbox) - venkatchalla06/poc-mutable-action-demo

Controlled PoC: consumer workflow demonstrating mutable-tag action RCE (authorized self-owned sandbox) - venkatchalla06/poc-mutable-action-consumer

CVE-2026-19478: GitLab GraphQL Vulnerability PoC. Contribute to n0xdaemon/cve-2026-19478 development by creating an account on GitHub.

A responsive and accessible End-to-End Frequent Flyer Portal built with React, Vite, and Tailwind CSS. Features include real-time form validation, flyer search, XSS input sanitization, loading stat...

Secure Verse 🛡️ | SIH 2026 Submission by Team Septora. An enterprise-grade, automated vulnerability scanner that translates complex OWASP & network threats into actionable, readable reports...

vulnerability scanner project based on Greenbone Community Edition (OpenVAS) - jordobe/vulnscaner

Exploit for KeyCloak CVE-2026-18963. Contribute to Snizi/CVE-2026-18963-Exploit development by creating an account on GitHub.

Full Firefox chain: CVE-2026-2796 wasm type confusion -> content-process RCE, plus CVE-2026-2768 parent-process escape analysis (both fixed in Firefox 148) - SneakyNachos/CVE-2026-2796-and-C...

Malware Static & Dynamic Triage Pipeline - PE Header Parser, Shannon Entropy & YARA Engine - toprakahmetaydogmus/05-sandbox-malware-triage

LuaGB - Game Boy / Game Boy Color emulator for PS5 via Luac0re. fixGB running as userland shellcode, no kernel exploit. - soniciso1/LuaGB

Entry-level SOC portfolio project demonstrating YARA rule development, multi-indicator detection, recursive scanning, false-positive testing and tuning, and SHA-256 collection in a safe REMnux lab....